IT Security Engineer

Blue Bird; Asia; Presencial; PEN 235.000 - 336.000; Jornada completa

Descripción de la vacante

Blue Bird is seeking a seasoned IT Security professional to lead penetration testing, threat hunting, and incident response from its Jakarta head office. The role focuses on securing APIs, mobile platforms, and microservices while optimizing SIEM/EDR detection and reducing false positives.

You will coordinate vulnerability management activities, perform forensic investigations, and strengthen configurations across servers, databases, and networks to meet security standards.

Formación

• Minimum of 3 years of experience in IT Security, Security Engineering, or SOC.
• Experience in security testing on Android and iOS platforms, and securing APIs, microservices, and databases.
• In-depth technical experience with SIEM, EDR, and vulnerability management tools.
• Capable of Internal Penetration Testing and Vulnerability Assessments using tools like Burp Suite.
• Able to analyze data packets, logs, and attack techniques per MITRE ATT&CK.
• Cybersecurity certifications are a plus.
• Willing to work from our Head Office in Mampang.

Responsabilidades

• Conduct scheduled penetration testing on internal infrastructure, applications, and networks to identify vulnerabilities.
• Manage routine vulnerability scanning and coordinate patching or mitigation with Infra/DevOps.
• Manage and optimize SIEM/EDR rules to detect threats and reduce false positives.
• Proactively hunt for hidden threats using log-based and data traffic investigations.
• Perform investigations during incidents, collect digital forensic evidence, and provide rapid resolution recommendations.
• Provide technical guidance to strengthen server, database, and network configurations.

Conocimientos

Penetration testing

Incident response

Threat hunting

Log analysis

MITRE ATT&CK

Herramientas

Burp Suite

SIEM

EDR

Vulnerability management tools

Descripción del empleo

• Conduct scheduled penetration testing on internal infrastructure, applications, and networks to identify security vulnerabilities.
• Manage routine vulnerability scanning and coordinate patching or technical mitigation processes with the Infra/DevOps team.
• Manage and optimize SIEM/EDR rules to accurately detect threats and reduce false positives.
• Proactively hunt for hidden threats within the network using log-based and data traffic investigation methodologies.
• Perform technical investigations during incidents, collect digital forensic evidence, and provide rapid resolution recommendations.
• Provide technical guidance to strengthen the configuration of servers, databases, and network devices in accordance with security standards.
• Implement the company's cybersecurity policies and procedures.

Qualifications

• Minimum of 3 years of experience in IT Security, Security Engineering, or Security Operations Center (SOC).
• Experience in security testing on Android and iOS platforms, as well as securing APIs, microservices, and databases.
  Strong understanding of the OWASP Top 10.
• In-depth technical experience in managing SIEM, EDR, and vulnerability management tools.
• Capable of performing Internal Penetration Testing and Vulnerability Assessments both manually and using tools such as Burp Suite, etc.
• Able to analyze data packets, system logs, and understand attack techniques based on the MITRE ATT&CK framework.
• Relevant cybersecurity certifications will be an advantage.
• WillingtoworkfromourHeadOfficeinMampang.