IT Security Engineer

Your tasks

Tanggung Jawab

• Vulnerability assessment mandiri (prioritas CVSS + konteks bisnis)
• Incident response: triage, containment, pengumpulan evidence
• Integrasi SAST/DAST & dependency scanning di CI pipeline
• Security training untuk developer

Nilai Tambah

• Vulnerability assessment mandiri (CVSS + dampak bisnis)
• Incident response (triage, containment, evidence)
• DevSecOps: SAST/DAST & dependency scanning di CI
• Pentest formal (web, mobile, API, network)
• SIEM (Splunk, ELK, Wazuh, Sentinel)
• Compliance framework (ISO 27001, NIST, SOC2)
• Sertifikasi (Security+, CEH, OSCP, GPEN, CISSP)

Requirements

Kualifikasi

• Pemahaman OWASP Top 10 & secure coding practice
• Pemahaman networking, TCP/IP, & common attack vectors
• Familiar Linux & Windows fundamentals
• Mampu menulis laporan temuan yang jelas

Skills: Penetration Testing, Owasp, Security Information & Event Management (Siem), Cybersecurity, Network Security, Linux