Job description for IT Cybersecurity at PT Brighty Global Sinergi
Qualifications
- Minimum 2–3 years of experience in Application Security, Product Security, or Security Engineering.
- Strong knowledge of OWASP Top 10, API Security, OAuth2/JWT, and Secrets Management.
- Hands-on experience with Burp Suite, OWASP ZAP, SAST/DAST, and Dependency Scanning tools.
- Familiar with AWS/GCP, Docker, Linux Hardening, and Cloud Security.
- Experience with SaaS multi-tenant architecture, DevSecOps, and Infrastructure as Code (Terraform) is preferred.
Key Responsibilities
- Conduct security reviews and threat modeling for new features.
- Manage vulnerability assessments (SAST/DAST, dependency scanning) and coordinate remediation.
- Implement infrastructure hardening, encryption, and secure secrets management.
- Review IAM/RBAC, audit trails, and access controls.
- Monitor security events, incident response, and penetration testing activities.
- Ensure compliance with UU PDP and data protection best practices.
- Establish Secure SDLC and integrate security into CI/CD pipelines.
