Total 7 Legal / Public / Security job vacancies in Jalan Ancol Barat 1 Nomor 9-10, Kel Ancol Kec. Pademangan, Kota Administrasi Jakarta Utara

About The Role

As Head of Legal, you will lead the Legal Team to ensure that every action, transaction, and compliance aligns with applicable laws and regulations. You will anticipate any required permits, qualifications, and/or certifications the company needs for current and future transactions and take the lead in those processes. You will handle document preparation, negotiate, and discuss transactions involving C-level stakeholders or potential stakeholders (local or international). You will also provide suggestions, take action, and lead initiatives regarding potential Company restructuring that will benefit the Company as a whole or address its needs.

Job Responsibilities

• Lead the Legal Team to address the Company’s legal needs.
• Ensure all of the Company’s compliance activities align with applicable laws and regulations.
• Possess a deep understanding of corporate law.
• Advise on the legal implications of corporate structure, mergers, acquisitions, and other strategic transactions.
• Lead the legal aspects of mergers, acquisitions, joint ventures, and other corporate transactions.
• Oversee due diligence processes, negotiate transaction terms, and ensure legal documentation is accurate and aligned with the Company’s interests.
• Take charge of the Company’s transactions and actions requiring legal review or intervention.
• Anticipate legal requirements necessary for the Company to conduct business.
• Advise on regulatory compliance matters and represent the Company in government and regulatory interactions as needed.
• Counsel C-level executives and upper management on potential legal matters and/or disputes.
• Develop and implement a comprehensive legal strategy to minimize risks and optimize opportunities.

• Master’s degree in Law from a reputable university.
• Minimum of 7 (seven) years of Post-Qualified Experience (PQE), with at least the last two years as a Head of Legal or a Senior Associate at a reputable law firm.
• Experience in a construction company or a strong understanding of construction regulations and qualifications is preferred.
• Experience in a reputable law firm is highly desirable.

- Monitoring and auditing activity logs
- Help set up and enforce IT security policies
- Help organizing IT security documents and documentations
- Performing regular security checks and processes on our company’s systems
- Monitoring and responding to SIEM alerts
- Contributing to the improvements of the company’s security policies, process, and tooling

INDICO is a digital technology subsidiary company of Telkomsel, Indonesia's leading digital telecom company. INDICO plays a strategic role as a holding company that houses current and prospective vertical digital business portfolios, including Kuncie (edu-tech), Fita (health-tech), and Majamojo (game). Moving forward, INDICO aims to explore opportunities in multiple verticals adjacent to Telkomsel's digital businesses. As a digital platform company, INDICO aims to leverage Telkomsel's digital assets and capabilities to create a flywheel effect of innovations to develop cross-sectoral digital solutions that will empower Indonesia's digital economy.

INDICO believes that we can reach beyond to empower Indonesians and enable businesses through our strong core values of EPIC WAY (Excellence, Positivity, Impactful Collaboration, Customer First, Walk the Talk, Accountability, Yes-if Mindset).

What you will do, but not limited to:

• Manage and secure AWS environments.
• Integrate and automate DAST/SAST tools in CI/CD pipelines.
• Conduct penetration testing for applications, containers, and infrastructure.
• Implement and monitor AWS security services (IAM, GuardDuty, CloudTrail).
• Perform vulnerability assessments and enforce container image compliance.
• Respond to security incidents and ensure runtime security in AWS Services..

• 3+ years in DevSecOps, Cloud Security, or Pentesting.
• Expertise in AWS (EKS, ECS, IAM, Lambda) and Kubernetes.
• Experience with DAST/SAST tools (e.g., OWASP ZAP, Burp Suite, SonarQube).
• Hands-on experience with CI/CD pipelines (GitLab, Jenkins) and IaC tools (Terraform/CloudFormation).
• Strong knowledge of penetration testing tools and methodologies.
• Familiarity with OWASP, CIS benchmarks, and container security tools.

Preferably:

• Experiences in AWS, Kubernetes and Security

About the Role

The Associate Software Security Engineer plays an essential role in protecting Amartha from evolving cyber threats. You will be part of our dynamic security team, focusing on identifying and mitigating security risks across our technology stack.

About the Team

Our Information Security team consists of dedicated security professionals who prioritize security and privacy by design. We work closely with development teams to enable secure product development while maintaining operational efficiency.

Primary Responsibilities

- Execute vulnerability assessments and penetration tests across web applications, APIs, and mobile platforms

- Implement and maintain security controls in cloud environments (GCP, AWS)

- Develop automation scripts and tools to enhance security processes

- Perform security code reviews and threat modeling

- Support our bug bounty program through triage and validation

- Monitor systems for security anomalies and investigate potential incidents

- Collaborate with development teams to remediate security findings

Growth & Development

- Mentorship from experienced security engineers

- Certification and training support

- Hands-on experience with modern security tools and challenges

- Clear career advancement path within the security team

Required Skills

- 2+ years of hands-on security testing or software development experience

- Strong understanding of web security fundamentals and OWASP Top 10

- Proficiency in at least one scripting/programming language (Python, Bash, or Go)

- Experience with security testing tools (Burp Suite, OWASP ZAP)

- Basic understanding of cloud security concepts

- Ability to clearly communicate technical findings to various stakeholders

- Fast learner with passion for cybersecurity

- Self-motivated to stay updated with security trends and threats

Preferred Qualifications

- Security certifications (eJPT, OSCP, CEH)

- Experience with cloud platforms (AWS, GCP)

- Knowledge of CI/CD pipelines and DevSecOps practices

- Mobile application security testing experience

- Familiarity with infrastructure as code (Terraform, Ansible)

Technical Environment

- Security Tools: Burp Suite, Metasploit, Nmap, MobSF, Frida

- Development Tools: Git, GitHub, Jenkins

- Cloud Platforms: AWS, GCP

- Programming Languages: Python, Bash, Go

• Memberikan analisa hukum & legal advice
• Mampu menangani permasalahan hukum
• Dapat membangun relasi & berkoordinasi dengan baik dengan penegak hukum
• Lebih disukai mengetahui terkait compliance perusahaan

About the Role 

The Security Engineer plays a crucial role in Amartha. You will be the warrior who will spearhead various Information Security programs to protect Amartha from internal and external threats.

About the team

The Information Security team in Amartha is a group of dynamic, highly-analytical  individuals who are highly mindful in driving security and privacy by design within the various aspects of product lifecycle and engineering processes. We are the team who are highly passionate to be the security enabler of Amartha’s systems

Job Desc/What will you do

• Identify current and emerging technology issues including security trends, vulnerabilities and threats through various security assessment activities (including but not limited to: . penetration testing, vulnerability assessment, etc)
• Recognize complex technical issues and managing them within a fast-paced business environment
• Perform proactive investigation to analyze security weaknesses and recommend appropriate strategies
• Perform Threat intelligence activities
• Work closely with internal and external teams to implement security solutions
• Acquire and implement new technological solutions to enhance organizational security posture
• Identify, define and document system security requirements and recommend solutions
• Monitor systems for irregular behavior and set up preventive measures
• Manage bug bounty program
• Enhance the effectiveness of security related processes through automation and orchestration

Requirements

• 5+ years of related job experience
• Excellent analytical and interpersonal skills
• Ability to express technical information clearly at different organizational levels
• Having relevant certification are preferable (e.g.  CEH,OSCP, eCPPT, Ejpt etc)
• Advance knowledge in  API Security, Mobile/Application Security, Cloud Security
• Advance knowledge in security adversarial techniques, tactics, and procedures
• Experienced in conducting Static Application Security Test (SAST) and Dynamic Application Security Test (DAST)
• Experienced in scripting using Python, Bash, Go
• Highly skilled with strong hands-on experience with various security assessment tools such as Metasploit, BurpSuite, ZAP, OWASP tools, Hydra, Netsparker, Wireshark, Apktool, nikto, Cloudbrute , Kali Linux tools, Frida, MobSF, or comparable technologies
• Familiar with Cloud Platform such as GCP, AWS 
• Tools familiarity : Python, Bash, TerraFrom, Ansible, GitHub, Jenkins, Artifactory, Jira, Terraform, Git, BurpSuite, Hydra, Nessus, NMap, Metasploit, Frida, MobSF

1. Perencanaan program penanganan insiden dengan koordinasi bersama tim SOC & Security Engineer.

2. Identifikasi kerentanan dan serangan-serangan security serta memberikan advice dalam penanganan serangan kepada Internal, L3, manajemen dan/atau pihak eksternal – client Perusahaan.

3. Analisis trend postur keamanan cyber dan Security Risk Assessment terhadao produk dan jasa yang berkaitan terhadap regulasi keamanan siber.

4. Menyusun laporan dan closing insiden dan ringkasan teknis serta melakukan presentasi hasil laporan.

5. Membuat use case dan integrasi ke dalam SIEM dengan koordinasi bersama tim Security Engineer.

6. Bertanggung jawab atas daily operasional di Klien dan meeting rutin dengan koordinasi bersama tim L1, PMO dan yang berkepentingan.