Job description for IT Security Engineer at PT Prima Data Semesta
Tanggung Jawab
- Vulnerability assessment mandiri (prioritas CVSS + konteks bisnis)
- Incident response: triage, containment, pengumpulan evidence
- Integrasi SAST/DAST & dependency scanning di CI pipeline
- Security training untuk developer
Kualifikasi
- Pemahaman OWASP Top 10 & secure coding practice
- Pemahaman networking, TCP/IP, & common attack vectors
- Familiar Linux & Windows fundamentals
- Mampu menulis laporan temuan yang jelas
Nilai Tambah
- Vulnerability assessment mandiri (CVSS + dampak bisnis)
- Incident response (triage, containment, evidence)
- DevSecOps: SAST/DAST & dependency scanning di CI
- Pentest formal (web, mobile, API, network)
- SIEM (Splunk, ELK, Wazuh, Sentinel)
- Compliance framework (ISO 27001, NIST, SOC2)
- Sertifikasi (Security+, CEH, OSCP, GPEN, CISSP)
