Deskripsi pekerjaan IT Application Security Pt Sat Nusapersada Tbk
SALARY IS NEGOTIABLE AND WILL BE DISCUSSED DURING THE INTERVIEW, BASED ON CANDIDATE'S QUALIFICATIONS AND EXPERIENCE.
Requirements:
- Minimum 4–5 years in IT, with at least 3 years in an IT security or cybersecurity-focused role
- Hands-on experience in vulnerability assessment and penetration testing of web applications, APIs and infrastructure (e.g., Burp Suite, Nessus/OpenVAS, Nmap, Metasploit), including writing reports and following findings through to remediation
- Experience in security monitoring and incident handling using a SIEM/SOAR platform; experience with Wazuh and TheHive is a plus.
- Solid knowledge of network, endpoint and application security, including firewalls, IDS/IPS, access management, OWASP Top 10 and secure SDLC
- Experience supporting security audits and familiarity with ISO 27001
- Proven project management and communication skills: able to coordinate vendors and crossdepartment teams, and explain security risks clearly to management in Bahasa Indonesia and English
- Bachelor's degree in Computer Science, Information Technology or a related field; CompTIA Security+ or CEH certification is a plus.
Responsibilities:
- Maintain a secure IT environment for all company applications, infrastructure and end-user devices by managing security tools (firewall, IDS/IPS, endpoint protection, email security, IAM) and making sure security patches are applied on time
- Run the VAPT program: perform internal vulnerability scans and penetration tests, coordinate external penetration tests with vendors, and drive remediation with application and system owners until fixes are verified
- Monitor security events using SIEM/SOAR and lead incident response, from alert triage and investigation to recovery and post-incident review
- Work with developers to build security into applications, including secure coding guidance, OWASP Top 10 controls and security review before go-live
- Support internal, customer and third-party security audits, close audit findings, and work with the IT Security Governance team to maintain security policies and SOPs aligned with ISO 27001
- Manage security projects end to end and report security status, risks and metrics to management regularly
