Security Engineer: PenTests, Cloud & Incident Response

Indivara Group; Indonesia; On-site; IDR 180,000,000 - 280,000,000; Full time

Job summary

Indivara Group is seeking a security specialist to monitor, analyze, and respond to incidents across applications, Linux servers, and cloud infrastructure. You will design controls using Secure-by-Design principles and collaborate with developers to review architecture and configurations.

You will support penetration testing, perform threat modeling, and improve logging and alerting with SIEM tools. Strong communication to both technical and non-technical stakeholders is required.

Qualifications

• Hands-on Linux experience is required for daily usage, permissions, networking, and log analysis.
• Experience supporting or conducting penetration testing or vulnerability validation (not limited to scanning).
• Understanding of web & API security fundamentals (OWASP Top 10).
• Exposure to Secure-by-Design principles within SDLC.
• Understanding attacker techniques and common attack paths.
• Experience analyzing vulnerabilities and distinguishing false positives vs real risks.
• Basic experience securing AWS resources (IAM usage, EC2/Linux hardening, logging).
• Understanding SIEM concepts (log sources, alerting, basic correlation).
• Basic knowledge of EDR/XDR and endpoint incident response concepts.
• Ability to clearly explain security risks and remediation to technical and non-technical stakeholders.

Responsibilities

• Monitor, analyze, and respond to security incidents across applications, Linux servers, and cloud infrastructure.
• Design and implement security controls using Secure-by-Design / Security-by-Default principles.
• Collaborate with developers to review architecture, configurations, and security-relevant code.
• Support and participate in penetration testing (web, API, infrastructure), including validation of findings and remediation.
• Perform basic threat modeling and risk assessment for new and existing systems.
• Improve security logging, monitoring, and alerting using SIEM and endpoint security tools.
• Participate in incident response, root cause analysis, and post-incident reviews.
• Maintain practical security guidelines and best practices for engineering teams.

Skills

Incident response

Threat modeling

Security communication

Analytical thinking

Ownership mindset

Working under pressure

Security best practices

Education

OSCP

CEH

Tools

Burp Suite

Metasploit

Nessus

Wazuh / ELK / Splunk

SOAR

Python/Bash scripting

Job description

Indivara Group is seeking a security specialist to monitor, analyze, and respond to incidents across applications, Linux servers, and cloud infrastructure. You will design controls using Secure-by-Design principles and collaborate with developers to review architecture and configurations.

You will support penetration testing, perform threat modeling, and improve logging and alerting with SIEM tools. Strong communication to both technical and non-technical stakeholders is required.