Job description for Senior Security Engineer at PT Neptus Teknologi Indonesia
POSISI : SENIOR SECURITY ENGINEER
1. Technical - Networking & Infrastructure
- Pemahaman mendalam terkait arsitektur network security
- Paham advanced routing, BGP basic, ASN, CDN behavior
- Expert Linux administration, termasuk hardening, automation (bash/ansible)
2. Technical - Security
- Mastery OWASP Top 10 + OWASP API Security Top 10, termasuk exploitation & mitigation strategy
- Pengalaman threat modeling, vulnerability assessment, penetration testing
- Paham incident response process & forensic dasar
- Pengalaman dengan SIEM (log correlation, CEF/syslog format)
3. Technical - Web Application
- Pemahaman mendalam terkait web app security (auth/authz flaws, business logic vuln, API security)
- Pengalaman security code review atau secure SDLC
- Paham WAF rule authoring & tuning (custom rules, false positive management)
4. Technical - Programming & Monitoring
- Python advanced (automation scripting, API integration, data processing untuk security analytics)
- Expert Grafana/Loki/Prometheus - bisa design dashboard, alerting rule, PromQL/LogQL custom query
- Familiar dengan infrastructure as code (Terraform/Ansible) dan regex (Regular Ex jadi nilai plus
5. Leadership & Strategic
- Bisa mentoring junior engineer
- Pengalaman Lead project (migration, incident, atau security assessment)
- Bisa translate technical risk ke business language untuk stakeholder/management
6. Experience
- Minimal 4-5 tahun di security engineering/analyst role
- Sertifikasi relevan menjadi nilai plus (OSCP, CISSP, GWAPT, CEH)
