Job description for Security Analyst at PT Vertex Nexlink Solusi
QA Security
5 tahun Pengalaman
"1. Minimal 5 tahun pengalaman di bidang IT Security/Cyber Security, dengan pengalaman sebagai IT Security Consultant, Security Architect, Senior Security Analyst, atau posisi setara
2. Memiliki pengalaman end-to-end security implementation dan operation, serta memahami security architecture pada area Identity, Network, Endpoint, Application, Database, Data, Cloud & Infrastructure
3. Memiliki kemampuan security analysis, incident handling, log analysis, dan threat hunting, khususnya terkait DLP/Data Security, serta memahami security technology dan best practice seperti CASB, PAM, SIEM, EDR, Active Directory, Reverse Proxy, Zero Standing Privilege, dan Workload Security
4. Memiliki kemampuan stakeholder dan vendor management, serta mampu berkomunikasi dengan Head of IT, executive, user, SOC, vendor/third party, dan technical team
5. Memiliki analytical thinking, problem solving, consulting, dan communication skills yang kuat serta mampu memberikan security recommendation secara independen berdasarkan risk, business requirement, dan security best practice
ROLE - IT SECURITY ANALYST
1. IT Security Consultant Level – Mampu menjadi technical advisor dan partner bagi Head of IT
2. End-to-End Security Architecture – Memahami security architecture secara menyeluruh
3. Implementation & Operation – Memiliki pengalaman implementasi security tools/technology baru serta mampu melakukan assessment, design, integration, deployment, operation, dan improvement terhadap existing maupun new technology
4. Security Analysis & Threat Hunting – Mampu melakukan security analysis, incident investigation, log analysis, incident handling, serta threat hunting, khususnya DLP dan Data Security
5. Security Technology & Best Practice – Memahami technology dan security best practice/policy pada area Identity, Network, Security Operations, Data, AI, Cloud & Infrastructure, termasuk CASB, Reverse Proxy, Shadow IP, Sensitive Labeling, DRM, Data Lineage Security, Zero Standing Privilege, Active Directory, dan Workload Security
6. Incident & Technical Analysis – Memiliki pemahaman mendalam mengenai log source, security alert, incident response, malware/threat, root cause analysis, serta remediation
7. Stakeholder & Vendor Management – Mampu menjadi koordinator dan technical counterpart bagi vendor/third party, SOC, IT team, user, management, dan executive, khususnya terkait alert, incident, remediation, policy, implementation, dan sosialisasi
8. Security Advisory & Risk Assessment – Mampu memberikan rekomendasi security secara independen serta memahami best practice pengamanan end-to-end dari User termasuk identifikasi security gap, risk, control, dan remediation"
