(Logistics Tech) Senior It Security Engineer - Blue Team

About the Company

Our client is a logistics and courier company based in Indonesia. Founded in 2014, our client offers domestic and international shipping services, as well as logistics solutions, to individuals and businesses. The company's mission is to provide reliable and efficient delivery services at affordable prices to customers across Indonesia. Our client operates through a network of over 20,000 service points, including drop-off and pick-up points, and has a fleet of over 20,000 vehicles. The company offers a range of shipping options, including same-day, next-day, and regular delivery services, as well as cash-on-delivery and return services.

Our client has also developed an advanced technology platform to streamline its operations and improve the customer experience. The company's technology includes a mobile app that allows customers to track their shipments in real-time and manage their deliveries, as well as a web-based platform for business customers to manage their shipping and logistics needs. Our client has received recognition for its fast growth and innovation in the logistics industry, including being named one of the fastest-growing companies in Indonesia by the Jakarta Globe. The company has also expanded its operations to other Southeast Asian countries, including Malaysia and Thailand, and plans to continue its growth and expansion in the region.

Responsibilities:

• Hire and upskill personnel in security team to meet security objectives
• Develop and execute a security strategy and roadmap, with buyin from the organization and affiliates
• Drive to design, implement, and maintain the organization's cybersecurity plan
• Plan, execute, and document the result of white box and black box testing periodically
• Implement security tools such as policy generation, auditing, and detection pipelines
• Seeking to build in security during the development stages of software systems, networks, etc
• Coordinate Internal and external audit against relevant standards applicable to company such as PCI-DSS, ISO 27001, NIST
• Act as domain expert for information security, provide security expertise and best practices guidance to a diverse set of engineering and businesses
• Conduct security reviews of core corporate and production infrastructure

Job Requirements:

• Excellent command of Penetration testing, hacking, Digital forensics, Secure application development
• Bachelor's Degree of Information Technology or related field
• 5+ years of working experience
• Familiar with Cloud Provider such as: GCP and AWS