Total 7 security analyst job vacancies in Gedung Wirausaha, Lantai 7jl. Hr Rasuna Said Kavling C5, Jakarta

1. Perencanaan program penanganan insiden dengan koordinasi bersama tim SOC & Security Engineer.

2. Identifikasi kerentanan dan serangan-serangan security serta memberikan advice dalam penanganan serangan kepada Internal, L3, manajemen dan/atau pihak eksternal – client Perusahaan.

3. Analisis trend postur keamanan cyber dan Security Risk Assessment terhadao produk dan jasa yang berkaitan terhadap regulasi keamanan siber.

4. Menyusun laporan dan closing insiden dan ringkasan teknis serta melakukan presentasi hasil laporan.

5. Membuat use case dan integrasi ke dalam SIEM dengan koordinasi bersama tim Security Engineer.

6. Bertanggung jawab atas daily operasional di Klien dan meeting rutin dengan koordinasi bersama tim L1, PMO dan yang berkepentingan.

What you will be doing:

• Responsible for implementing safety & security operation to standards and quality 
• Responsible for assisting the Assistant Security Manager in the planning, coordination, organization, staff supervision and quality control for the security operational in order to effect optimum protection of guest, employee and hotel assets
• Responsible for day to day security operation through the effective and efficient of security officers
• Ensure that the hotel and department standards are strictly maintained
• Facilitate effective and reliable communication across all team members / security officers including handovers to next shift supervisors
• Ensures that all security officers are strictly complied with the standards, policies and procedures established by the department
• Strictly monitor, maintain and enhance security officer performance standards

About the Role 

The Security Engineer plays a crucial role in Amartha. You will be the warrior who will spearhead various Information Security programs to protect Amartha from internal and external threats.

About the team

The Information Security team in Amartha is a group of dynamic, highly-analytical  individuals who are highly mindful in driving security and privacy by design within the various aspects of product lifecycle and engineering processes. We are the team who are highly passionate to be the security enabler of Amartha’s systems

Job Desc/What will you do

• Identify current and emerging technology issues including security trends, vulnerabilities and threats through various security assessment activities (including but not limited to: . penetration testing, vulnerability assessment, etc)
• Recognize complex technical issues and managing them within a fast-paced business environment
• Perform proactive investigation to analyze security weaknesses and recommend appropriate strategies
• Perform Threat intelligence activities
• Work closely with internal and external teams to implement security solutions
• Acquire and implement new technological solutions to enhance organizational security posture
• Identify, define and document system security requirements and recommend solutions
• Monitor systems for irregular behavior and set up preventive measures
• Manage bug bounty program
• Enhance the effectiveness of security related processes through automation and orchestration

Requirements

• 5+ years of related job experience
• Excellent analytical and interpersonal skills
• Ability to express technical information clearly at different organizational levels
• Having relevant certification are preferable (e.g.  CEH,OSCP, eCPPT, Ejpt etc)
• Advance knowledge in  API Security, Mobile/Application Security, Cloud Security
• Advance knowledge in security adversarial techniques, tactics, and procedures
• Experienced in conducting Static Application Security Test (SAST) and Dynamic Application Security Test (DAST)
• Experienced in scripting using Python, Bash, Go
• Highly skilled with strong hands-on experience with various security assessment tools such as Metasploit, BurpSuite, ZAP, OWASP tools, Hydra, Netsparker, Wireshark, Apktool, nikto, Cloudbrute , Kali Linux tools, Frida, MobSF, or comparable technologies
• Familiar with Cloud Platform such as GCP, AWS 
• Tools familiarity : Python, Bash, TerraFrom, Ansible, GitHub, Jenkins, Artifactory, Jira, Terraform, Git, BurpSuite, Hydra, Nessus, NMap, Metasploit, Frida, MobSF

DESKRIPSI PEKERJAAN

• Pengetahuan mendalam dalam proses bisnis IT;
• Pengetahuan mendalam dalam konsep IT Network dan Security serta teknologi terbaru;
• Memiliki kemampuan teknis dalam perencanaan konfigurasi jaringan/keamanan infomasi, Analisa jaringan/keamanan infomasi serta pengelolaan operasional jaringan/keamanan infomasi;
• Menguasai berbagai kemampuan teknis dalam beberapa produk seperti cisco, Huawei, juniper, palo alto, fortigate, serta produk lainnya;
• Memiliki kemampuan teknis terkait perencanaan serta pengelolaan roadmap IT yang terkait dengan jaringan dan keamaman informasi;
• Mampu memahami script coding aplikasi dan teknik dasar dalam database;
• Mampu memahami proses vulnerability assessment dan penetration testing;
• Berpikir konseptual dan sistematis yang kuat;
• Kemampuan bekerja sama.

Contract Life Cycle management:

• Daily trade confirmation monitoring & reconciliation (completeness/coherence check)
• Daily contract document reception / issuing monitoring & signature follow-up
• Closing of fully executed trades and follow up of accrual ageing

Invoicing & Cash management:

• Daily invoice booking (Goods, Transport, Logistic Services, Claims, Broker commission)
• Timely and Efficient Payments: Process payments promptly and efficiently to vendors and suppliers.
• Original invoices must be obtained and archived for 10 years in compliance with local government policy.
• Each invoice copy is accompanied by sets of supporting documents, aiding in validation. User ensures any missing documents or corrections are obtained from the supplier/vendor.
• Ageing balance monitoring

Master data management:

• Collect & Verify mandatory documents related to Secondary cost counterparty creations / updates
• Collect & Verify mandatory documents related to bank account creations / updates

1. Delivering research, unearth actionable insights, formulate and present brand strategies to management and relevant functions.

2. Developing brand architecture, positioning and strategy and internalize it in corporate planning strategy.

3. Overview, monitor and report all brand strategic utilization across company functions (internal & external stakeholders), ensuring compliant with our brand guideline and values and manage reputation risk for our brand.

4. Provide holistic brand experiences by take part in all company strategic initiatives, ensuring adhering brand values and improving our brand awareness & consideration to achieve best in class aspiration.

5. Collaborate with creative & corporate communications teams and contribute to improve core brand team deliverables

DESKRIPSI PEKERJAAN

• Memiliki Pengetahuan dasar dalam proses bisnis IT, Database dan Update Informasi terbaru;
• Pengetahuan dasar dalam konsep Database serta update informasi terbaru;
• Menguasai skill dasar dalam database, terutama oracle database dan MSSQL;
• Mampu memahami script sistem (minimum bash dan shell programming) dan operating System;
• Manajemen proses, Komunikasi, Penyelesaian masalah;
• Ketelitian dan keakuratan dalam menganalisa;
• Melakukan eksekusi instalasi dan konfigurasi database; 
• Membuat draft dokumentasi konfigurasi dan topologi database; 
• Melakukan eksekusi instalasi dan konfigurasi database;
• Membuat draft dokumentasi konfigurasi dan topologi database; 
• Membantu proses analisa masalah dan melakukan perbaikan; 
• Melakukan pendampingan preventive maintenance database; 
• Membuat draft dokumen hasil monitoring database, laporan proses backup dan replikasi database; 
• Melakukan identifikasi dan mitigasi risiko Database; 
• Membuat draft dokumentasi instalasi dan konfigurasi database; 
• Bekerja sama dengan pihak ketiga terkait perencanaan, pengelolaan dan operasional database.