Security Researcher

PT ITSEC Asia Tbk; Jakarta Pusat; On-site; IDR 200,000,000 - 260,000,000; Full time

Job summary

PT ITSEC Asia Tbk is seeking a Senior Security Researcher to study attacker behavior, develop threat intelligence, and enhance product security. You will work on MITRE ATT&CK-based TTPs, IoCs, and detection techniques within a hands-on security team.

Based in Jakarta, you will mentor junior researchers, collaborate with product teams, and prototype AI/ML-driven detection models for improved alert triage. The role emphasizes proactive prioritization and cross-functional communication to

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or related field.
• 3-5 years of experience in security research or threat intelligence.
• Strong knowledge of MITRE ATT&CK, TTPs, and modern threat landscapes.
• Familiarity with detection engineering; Snort/Suricata knowledge.
• Proficient in Python and Bash for test case development.
• Experience with Linux systems and networking fundamentals.
• Ability to manage multiple projects with a proactive mindset.
• Excellent communication skills; capable of mentoring others.

Responsibilities

• Study attacker TTPs using MITRE ATT&CK to understand behavior.
• Analyze real-world cyberattacks including malware and phishing.
• Develop IoCs, behavioral patterns, and detection signatures.
• Enrich threat intel databases for product and security use.
• Prototype AI/ML-driven security approaches for alerting.
• Coordinate with Security Researcher Lead on priorities.
• Contribute to security product grooming with technical input.

Skills

Threat hunting

MITRE ATT&CK

Adversary techniques

Scripting: Python

Scripting: Bash

Linux

Networking basics

Communication

Mentoring

Threat intelligence

Education

Bachelor’s degree in Computer Science, IT, Cybersecurity or related field

Tools

Snort

Suricata

Job description

Responsibilities

• Study adversary Tactics, Techniques, and Procedures (TTPs) using frameworks such as MITRE ATT&CK to understand modern attacker behavior and threat vectors.
• Perform in-depth analysis of real-world cyberattacks, including malware, exploits, phishing, and lateral movement techniques to understand how they bypass existing defenses.
• Develop actionable threat intelligence artifacts such as updated Indicator of Compromise (IoC), behavioral patterns, and detection signatures for internal use or product integration.
• Continuously update and enrich internal threat intelligence databases to ensure that security engineering and product teams have access to relevant, high-fidelity data.
• Explore and prototype AI/ML-driven security approaches, such as anomaly detection models, behavior-based classification, or automated alert triaging, for possible feature integration.
• Work closely with the Security Researcher Lead to align individual projects with strategic priorities and support product-focused research output.
• Participate in security product grooming discussions, offering a technical perspective on feasibility, attack surface, or mitigation strategies.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or related field.
• 3-5years of experience in security research, threat intelligence, or a similar role.
• Deep understanding of Tactics, Techniques, and Procedures (TTPs) frameworks such as MITRE ATT&CK, advanced threat hunting, and adversary techniques.
• Strong knowledge of detection signatures, advanced attack techniques, and modern threat landscapes.
• Strong familiarity with Snort/Suricata rules and modern detection engineering approaches.
• Proficiency in scripting languages (Python, Bash) to build test cases and validate product integrations.
• Experience working with Linux systems and a solid understanding of networking fundamentals.
• Proactive mindset and ability to prioritize and manage multiple projects.
• Excellent communication skills to convey technical findings effectively.
• Ability to mentor junior researchers.