Total 2 Legal / Public / Security job vacancies in Madiun, Madiun City

About the Role 

The Security Engineer plays a crucial role in Amartha. You will be the warrior who will spearhead various Information Security programs to protect Amartha from internal and external threats.

About the team

The Information Security team in Amartha is a group of dynamic, highly-analytical  individuals who are highly mindful in driving security and privacy by design within the various aspects of product lifecycle and engineering processes. We are the team who are highly passionate to be the security enabler of Amartha’s systems

Job Desc/What will you do

• Identify current and emerging technology issues including security trends, vulnerabilities and threats through various security assessment activities (including but not limited to: . penetration testing, vulnerability assessment, etc)
• Recognize complex technical issues and managing them within a fast-paced business environment
• Perform proactive investigation to analyze security weaknesses and recommend appropriate strategies
• Perform Threat intelligence activities
• Work closely with internal and external teams to implement security solutions
• Acquire and implement new technological solutions to enhance organizational security posture
• Identify, define and document system security requirements and recommend solutions
• Monitor systems for irregular behavior and set up preventive measures
• Manage bug bounty program
• Enhance the effectiveness of security related processes through automation and orchestration

Requirements

• 5+ years of related job experience
• Excellent analytical and interpersonal skills
• Ability to express technical information clearly at different organizational levels
• Having relevant certification are preferable (e.g.  CEH,OSCP, eCPPT, Ejpt etc)
• Advance knowledge in  API Security, Mobile/Application Security, Cloud Security
• Advance knowledge in security adversarial techniques, tactics, and procedures
• Experienced in conducting Static Application Security Test (SAST) and Dynamic Application Security Test (DAST)
• Experienced in scripting using Python, Bash, Go
• Highly skilled with strong hands-on experience with various security assessment tools such as Metasploit, BurpSuite, ZAP, OWASP tools, Hydra, Netsparker, Wireshark, Apktool, nikto, Cloudbrute , Kali Linux tools, Frida, MobSF, or comparable technologies
• Familiar with Cloud Platform such as GCP, AWS 
• Tools familiarity : Python, Bash, TerraFrom, Ansible, GitHub, Jenkins, Artifactory, Jira, Terraform, Git, BurpSuite, Hydra, Nessus, NMap, Metasploit, Frida, MobSF

Role Overview

As a Level 1 Security Operations Center (SOC) Analyst, you will play a crucial role in monitoring and managing security events to safeguard the organisation’s digital assets. Using tools like Microsoft Sentinel, you will triage alerts, investigate incidents, and escalate issues as necessary. This position offers an excellent opportunity to build a career in cybersecurity by gaining hands-on experience in a dynamic and collaborative environment.

Key Responsibilities

• Monitoring and Analysis:
• Continuously monitor Microsoft Sentinel for security alerts and potential threats.
• Analyse and prioritise security events to determine their legitimacy and severity.
• Incident Investigation and Escalation:
• Investigate alerts for signs of unauthorised access, malware activity, or phishing attempts.
• Escalate confirmed security incidents to Level 2 Analysts or the Incident Response team.
• Security Operations:
• Perform initial response actions such as disabling user accounts, blocking IPs, or containing suspicious activities under supervision.
• Log and document all events, analysis, and actions taken during the investigation process.
• Collaboration and Training:
• Work closely with internal teams to resolve security issues promptly.
• Stay updated on Microsoft Sentinel features, threat intelligence, and cybersecurity best practices.

Key Requirements

• Technical Knowledge:
• Hands-on experience or familiarity with Microsoft Sentinel and Azure security tools.
• Basic understanding of networking concepts (TCP/IP, DNS, VPNs).
• Knowledge of cybersecurity principles and common threat types.
• Soft Skills:
• Strong analytical and problem-solving abilities.
• Clear written and verbal communication skills.
• Ability to manage tasks effectively in a fast-paced environment.
• Experience:
• 0–2 years of experience in a cybersecurity or IT support role.

Qualifications & Experience

• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience).
• Certifications such as CompTIA Security+ or Microsoft Certified: Security Operations Analyst Associate (preferred).
• Familiarity with KQL (Kusto Query Language) for advanced queries in Microsoft Sentinel is an advantage.

Work Arrangement & Travel Requirements

• This is a remote role; however, a hybrid work arrangement may be introduced in the future if needed.
• The role may require occasional travel to the HQ in Singapore, as required or up to once every half year.
• Travel will follow Singapore’s per-diem travel arrangements to cover expenses.

Other Information

• This role requires strong organisational skills and the ability to manage multiple tasks simultaneously.
• Being on standby or working on a rotation basis may be required to ensure uninterrupted service delivery.

What We Offer

• Competitive salary and benefits package.
• Access to advanced training in Microsoft Sentinel and Azure security tools.
• A collaborative and supportive work environment.
• Opportunities for career growth in cybersecurity.

aCloud is an equal opportunity employer, committed to diversity and inclusion in the workplace.