Senior Security Architect & Threat Modeling Lead

Sagara Technology; Jakarta Pusat; On-site; IDR 400,000,000 - 650,000,000; Full time

Job summary

SAGARA Technology is seeking a Security Consultant in Jakarta to advise on security architecture, threat modeling, and SDLC security enhancements. You will review artifacts, assess risks, and deliver strategic remediation plans to strengthen platform security.

Candidates should have 5+ years in information security consulting or risk assessment, with knowledge of STRIDE, PASTA, DREAD, MITRE ATT&CK, and threat modeling tools, plus relevant certifications.

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, or related field.
• Minimum 5+ years of experience in Information Security Consulting, Security Architecture, or Risk Assessment.
• Strong knowledge of threat modeling methodologies such as STRIDE, PASTA, DREAD, and MITRE ATT&CK.
• Familiarity with threat modeling tools such as Microsoft Threat Modeling Tool, OWASP Threat Dragon, or IriusRisk.
• Certifications such as CISSP, CISM, CISA, CCSP, or CDPO are an advantage.

Responsibilities

• Provide risk-based recommendations to address identified security implementation gaps.
• Provide security consultation and advisory throughout the SDLC and platform/infrastructure operations.
• Review DFDs, data flows, trust boundaries, and other security artifacts to ensure alignment with threat modeling standards.
• Develop strategic remediation plans and prioritize security risks for identified threats.
• Assess security risks and recommend mitigations based on business impact and operational requirements.

Skills

STRIDE

PASTA

DREAD

MITRE ATT&CK

Security Architecture

Risk Assessment

Data Flow Analysis

API Security

Cloud Security

SDLC Security

Education

Bachelor’s degree in Information Technology, Cybersecurity, or related field

Tools

Microsoft Threat Modeling Tool

OWASP Threat Dragon

IriusRisk

Job description

SAGARA Technology is seeking a Security Consultant in Jakarta to advise on security architecture, threat modeling, and SDLC security enhancements. You will review artifacts, assess risks, and deliver strategic remediation plans to strengthen platform security.

Candidates should have 5+ years in information security consulting or risk assessment, with knowledge of STRIDE, PASTA, DREAD, MITRE ATT&CK, and threat modeling tools, plus relevant certifications.