Total 7 it analyst job vacancies in Legal / Public / Security category in Indonesia

1. Perencanaan program penanganan insiden dengan koordinasi bersama tim SOC & Security Engineer.

2. Identifikasi kerentanan dan serangan-serangan security serta memberikan advice dalam penanganan serangan kepada Internal, L3, manajemen dan/atau pihak eksternal – client Perusahaan.

3. Analisis trend postur keamanan cyber dan Security Risk Assessment terhadao produk dan jasa yang berkaitan terhadap regulasi keamanan siber.

4. Menyusun laporan dan closing insiden dan ringkasan teknis serta melakukan presentasi hasil laporan.

5. Membuat use case dan integrasi ke dalam SIEM dengan koordinasi bersama tim Security Engineer.

6. Bertanggung jawab atas daily operasional di Klien dan meeting rutin dengan koordinasi bersama tim L1, PMO dan yang berkepentingan.

Role Overview

As a Level 1 Security Operations Center (SOC) Analyst, you will play a crucial role in monitoring and managing security events to safeguard the organisation’s digital assets. Using tools like Microsoft Sentinel, you will triage alerts, investigate incidents, and escalate issues as necessary. This position offers an excellent opportunity to build a career in cybersecurity by gaining hands-on experience in a dynamic and collaborative environment.

Key Responsibilities

• Monitoring and Analysis:
• Continuously monitor Microsoft Sentinel for security alerts and potential threats.
• Analyse and prioritise security events to determine their legitimacy and severity.
• Incident Investigation and Escalation:
• Investigate alerts for signs of unauthorised access, malware activity, or phishing attempts.
• Escalate confirmed security incidents to Level 2 Analysts or the Incident Response team.
• Security Operations:
• Perform initial response actions such as disabling user accounts, blocking IPs, or containing suspicious activities under supervision.
• Log and document all events, analysis, and actions taken during the investigation process.
• Collaboration and Training:
• Work closely with internal teams to resolve security issues promptly.
• Stay updated on Microsoft Sentinel features, threat intelligence, and cybersecurity best practices.

Key Requirements

• Technical Knowledge:
• Hands-on experience or familiarity with Microsoft Sentinel and Azure security tools.
• Basic understanding of networking concepts (TCP/IP, DNS, VPNs).
• Knowledge of cybersecurity principles and common threat types.
• Soft Skills:
• Strong analytical and problem-solving abilities.
• Clear written and verbal communication skills.
• Ability to manage tasks effectively in a fast-paced environment.
• Experience:
• 0–2 years of experience in a cybersecurity or IT support role.

Qualifications & Experience

• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience).
• Certifications such as CompTIA Security+ or Microsoft Certified: Security Operations Analyst Associate (preferred).
• Familiarity with KQL (Kusto Query Language) for advanced queries in Microsoft Sentinel is an advantage.

Work Arrangement & Travel Requirements

• This is a remote role; however, a hybrid work arrangement may be introduced in the future if needed.
• The role may require occasional travel to the HQ in Singapore, as required or up to once every half year.
• Travel will follow Singapore’s per-diem travel arrangements to cover expenses.

Other Information

• This role requires strong organisational skills and the ability to manage multiple tasks simultaneously.
• Being on standby or working on a rotation basis may be required to ensure uninterrupted service delivery.

What We Offer

• Competitive salary and benefits package.
• Access to advanced training in Microsoft Sentinel and Azure security tools.
• A collaborative and supportive work environment.
• Opportunities for career growth in cybersecurity.

aCloud is an equal opportunity employer, committed to diversity and inclusion in the workplace.

Security Engineer - IT

As a Security Engineer, you will focus on the problem of keeping our systems safe and protecting our customers while adapting to the high-speed growth of our business and our enormous scale. You will be focusing on keeping interactions on our platform as simplified as possible using advanced engineering to detect and mitigate vulnerabilities and security flaws in Xtremax’s system. The ability to perform systems security or vulnerability analysis and design is a must. 

Responsibilities: 

• Develop a set of security standards and best practices for the organization and recommend security enhancements to management as needed. Develop strategies to respond to and recover from a security breach 
• Set up, configure, and tweak security in all infrastructure systems (System, Server, Network, and Client) 
• Handle, maintain and manage various potential security threats 
• Collaborate with other team members for security design and policy 
• Doing system hardening and penetration testing 
• Doing an internal security audit 
• Handle antivirus and malware protection 
• Doing backup and restore data in our system 
• Documented all internal audit processes, such as patching, update, server access log, VAPT, and backup recovery process 
• Conducts periodic scans of networks to find any vulnerability. They also conduct penetration testing, in which they simulate an attack on the system to highlight or find any weaknesses that might be exploited by a malicious party. 
• Proactive learning, assess and utilize new technologies and concepts with customer requirements 
• Responsibility for educating the workforce on information security through training and building awareness 

• Bachelor’s Degree in Software Engineering / Computer Science / Information Technology / equivalent or relevant work experience. 
• Having good knowledge about security systems and policy 
• Good at managing sensitive and confidential data, workstation devices, patching and upgrading systems, applications, services, and other infrastructure foundational components. 
• Good at planning, developing, and implementing IT security controls that are documented and working properly. 
• Familiar with system hardening and penetration testing 
• Experience handling antivirus and malware protection 
• Familiar with ISO27001 
• Familiar with Linux and Windows OS 
• Familiar with cloud security services such as AWS, Azure, and GCP 
• Able to create some script, i.e., bash, python 
• Love to learn, assess, and utilize new technologies 
• Having certification in cloud security area is a plus 

Security Engineer – Governance 

We are looking for an experienced and knowledgeable IT Security Governance to join our Security Engineer team. You will be responsible for the management and advances of our security policies, standards, and procedures.  

Responsibilities:  

• Ensure the strategy and implementation of information security in accordance with the needs & applicable regulations  
• Develop an information security framework and architecture in accordance with the company's needs  
• Develop and maintain policies, standards, and procedures that support the information security framework in accordance with best practices and applicable regulations.  
• Actively identify, analyze, measure, provide control recommendations, and monitor follow-up on risk control & information security.  
• Carry out regular evaluations of the implementation of IT security management policies, standards, and procedures  

Requirements:  

• Bachelor’s Degree in Software Engineering / Computer Science / Information Technology / equivalent or relevant work experience.  
• Minimum 2 years experiences in IT industry  
• Familiar and able to implement and lead various best practices & regulations for IT Security & Cyber Security such as ISO 27000, CSA Star, CIS, NIST, GDPR, etc.  
• Familiar with Security compliance or assessment tools  
• Having experience implement ISO 27017 and 27018 is a plus point  
• Familiar with cloud environment is a plus point.  

Job Description

1. Design, implement, and maintain network security infrastructure including firewalls, intrusion detection and prevention systems, VPN, and access control systems.
2. Monitor and analyze network traffic to detect potential security breaches and take appropriate actions to mitigate threats.
3. Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend treatment plans and communicate information about residual risk.
4. Conduct regular vulnerability assessments and penetration tests to identify and address any security vulnerabilities.
5. Investigate security incidents and coordinate with relevant teams to mitigate risks and prevent future incidents.
6. Manage security Policy Development and Implementation
7. Ensure readiness of Security Architecture, Compliance and Technology

• Bachelor's degree in Information Security, Computer Science, Information Technology, or related field.
• Minimum 4 years of experience in IT security, network security, or related roles.
• Strong knowledge of network security and risk management.
• Experience with firewall management, intrusion detection and prevention systems, VPN, and access control systems.
• Excellent analytical, problem-solving, and decision-making skills
• Good communication and interpersonal skills
• Willing to work in Karawaci, Tangerang.

Medical Insurance

Medical Check Up

Hi Everyone, PT Asuransi Jiwa Inhealth Indonesia Official (Mandiri Inhealth) is currently looking for suitable candidates to fill the position of Senior IT Security for our Head Office at Mega Kuningan, South Jakarta. Here are some of the details :

• Bachelor’s degree in Information Technology or System Information or a related field.
• Minimum of 5-10 years as a IT Security or IT Cyber Security
• Familiar with common security controls and security flaws for modern Mobile Application, Web Applications, APIs and Cloud Infrastructure
• Understands the OWASP testing methodology
• Manage reporting related Information System Security status
• Manage operational SIEM & Information System Security day to day
• Familiar with common security controls and security standard such as NIST
• Offensive Security certifications is an advantage such as CEH Pratical or OSCP /OSCE certifiied

• Develop and oversee key performance indicators (KPIs) for security.
• Oversee service level agreements (SLAs) for security operations and create risk-based dashboards for reporting.
• Create and implement a comprehensive vulnerability management program, including managing activities related to vulnerability assessment (VA) and penetration testing (PT).
• Develop and implement security programs for network, server, and cloud environments, including onboarding processes and pre- and post-scanning activities.
• Conduct periodic configuration reviews based on CIS benchmarks.
• Manage the application security program by identifying and mitigating risks in collaboration with business application teams.
• Collaborate in managing the endpoint security, network security, and server security programs.
• Collaborate in managing the overall security operations management program.

• At least 3-5 years of documented work experience in security engineering.
• Prior practical knowledge of web, mobile, and cloud security.
• Hands-on experience in constructing and maintaining security measures such as firewalls, intrusion detection systems, antivirus software, authentication systems, content filtering, etc.
• Thorough understanding of IT infrastructure concepts across all layers, including Servers, Networks, End User Computing, and Cloud.
• Experience in designing and implementing risk-based information security programs.
• Hands-on experience in implementing standards such as ISO 27001, NIST, CIS, or equivalent.
• Hands-on experience in designing, implementing, and managing Data Leak Prevention programs.
• Hands-on experience in conducting application security assessments, both manual and tool-based.
• Gained solid understanding of OWASP, CIS, and NIST guidelines for application security.
• Experience in utilizing anti-malware solutions.
• Experience in designing security programs for cloud services, including IAAS, PAAS, and SAAS.
• Hands-on experience with native cloud security capabilities.
• Experience in implementing cloud security solutions like CASB.
• Excellent communication and presentation skills.
• Experience in collaborating with mid-level and senior-level management, with the ability to understand business processes and requirements.
• Understanding and effectively communicating security risks to core technology teams and business functions.
• Preferred certifications: CISSP, CCSP, CISM, ISO 270001 LI/LA.