It Application Security Jobs

- Technical skills associated with malware analysis, exploits and vulnerabilities

- Experience in software development lifecycle, large-scale computing, machine learning modeling, DevOps, cybersecurity, and/or anomaly detection

- Experience in writing Sigma, and Yara detection rules

- Document and enrich the understanding of the threat landscape including attacker techniques, emerging trends, and patterns.

- Design and develop novel threat detection techniques or methodologies.

- Write generic and durable threat detections rules based on Static and Dynamic detection engines.

Membuat dan mengimplementasikan sistem sesuai dengan permintaan lintas fungsi untuk meningkatkan produktivitas di tempat kerja

Memastikan sistem yang telah dibuat berdasarkan permintaan lintas fungsi berjalan dengan responsif

Memenuhi dan mengimplementasikan kebutuhan teknis dan kebutuhan non teknis pengguna lintas fungsi

Mengikuti perkembangan system dan bahasa pemrograman

Menyusun dan memperbaharui laporan berkala terkait sistem serta membuat dokumentasi sesuai dengan kebutuhan

1. Sarjana atau lebih tinggi, jurusan ilmu komputer, teknologi informasi, sistem informasi, atau sejenisnya.

General knowledge of information security regulatory requirements and standards such as ISO 27001/2, SANS top 20 and NIST 800-53.

Knowledge of IT processes and controls and strong understanding of risk and control frameworks such as (Cob IT, ISO, NIST, ITIL)

Experience in risk, compliance, and information security policy development.

Experience in Cyber Security area SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing)

Experience in handling OJK Audit Process

5+ years of experience in the IT Security area.

Good knowledge of Network security (Fortigate)

Extensive knowledge of major Linux distros (Debian/Ubuntu/CentOS)

Good knowledge of SIEM , SOAR, NDR, EDR

Good verbal and communication skills

Continuously conducting research on the latest security technology to keep abreast of technological developments and applicable security standards.

Be the first level of support for any indication of an anomaly or cyber threat.

Vulnerability management (internal and external findings)

Conduct internal security testing on Remote’s products to find potential issues

Participate in product development, representing security requirements, including initial code implementation

Previous experience experience in Application Security or a related field

Adept in software security – understanding of security concepts, vulnerabilities, mitigations, and coding practices

Experience in securing cloud environments(AWS)

Experienced in vulnerability management, patching automation, and understanding of VA/PT techniques

7+ years of security industry experience utilizing web/mobile application security and knowledge of the security / threat landscape.

Providing risk and impact assessments of vulnerabilities or proposed mitigations

Research on the latest cybersecurity standard methodologies, trends, threats, and vulnerabilities, and technology frameworks

Working experience with cloud technologies such as AWS, Google Cloud, Ali, and Azure.

Excellent knowledge of pen-testing tools and procedures for Web/Mobile.

IT Project Management：Initiate IT project and manage project implementation to ensure high quality delivery.

Familiar with HTML 5, Python, PBI，database related knowledge and tools.

Good communication and presentation skills in Bahasa Indonesia and English, Mandarin skill is an advantage

Develop and implement new software programs

Maintain and improve the performance of existing software

Test and maintain software products to ensure strong functionality and operation

Menguasai perangkat security jaringan (Firewall, IPS, WAF, dll)

Kemampuan menganalisa port yang dibutuhkan

Implementasi patch di perangkat jaringan

Kemampuan korelasi event dari perangkat security yang ada

Update dengan perkembangan teknologi security

Menguasai security server (baseline security configuration, antivirus, firewall server)

Design & engineer both on premise and cloud information security solutions to address risks, vulnerabilities and threats

Bachelor's degree in Computer Science, Information Technology, or related field equivalent experience.

Experience in risk, complience, and information security policy development

Certified in information security certification (e.g. CISSP, CCSP) is preferred

Must have strong written and verbal communication skills in English

Have experience in cloud technologies, and familiar with cloud security architecture, design and operations.

·Experience min 2 years IT MIS / Report Development.

·Report Credit, Corp. plan, Marketing, Finance, dll

·Excellent analytical skills, self motivated, resourceful and creative problem solver

·Creating plan or schedule and do periodic maintenance of the entire data processing cycle

·Programming or scripting process batch, summary process, and monitor the process of extracting data

·Perform tuning, upgrading, optimization, back-up, and system recovery that support MIS

Manage production environment of core applications, monitor batch jobs and root cause analysis;

Manage the development and enhancement of eBao systems;

Identifying business requirements and translate into technical specifications;

At least 8 years of working experience on eBao package solutions in life insurance industries;

Good grasp in understanding business needs and requirements to translate for technical teams;

Strong experience impact analysis,system design, development and testing;

Understand business requirements via system/functional requirements and translate into business application features

Min 1 year experience in system development, preferably in life Insurance Industry

Design prototypes according to specification when required

Write high quality source code to build complete business applications within deadlines

Perform unit and integration testing to ensure system quality

Conduct functional and non-functional testing

Provide coaching in application best practices and implementation to enhance user experience

Design, build, and integrate Enterprise Application systems to enable efficiencies in key areas of the business

Utilize automation to streamline internal processes

Identify project issues and risks, and present alternatives for alleviating or resolving them

Bachelor Degree on Information System/Information Science/Information Engineering

Good understanding on the System Architecture

Have experience related to Threat Management and Internal Security Audit.

Minimum of 1 year of experience in the IT security

Bachelor's degree in Information Technology or related field

Understanding of OWASP tools and other tools such as NMAP, ISS, Nessus, Metasploit, Netcat

Stay up-to-date with the latest security trends, threats, and technologies.

Ensure that APP adhere to the applicable security standard operating procedures (SOP).

Pendidikan minimal S1 Teknologi Informasi atau yang relevan

Pengalaman kerja min. 3 (tiga) tahun sebagai application tester/QC/QA

Memahami proses bisnis produk digital perbankan

Mengerti dan memahami Software Development Life Cycle (SDLC)

Memahami proses bug tracking, ticketing, dan testing

Mempunyai pengetahuan dan pengalaman dalam membuat prosedur dan dokumentasi testing aplikasi

Proficient in conducting risk assessments, vulnerability management, and incident response.

Manage and respond to security incidents, including conducting investigations, coordinating with internal teams and external partners, and implementing corrective actions.

Develop and maintain strong relationships with vendors and external partners to enhance the bank's security capabilities.

Proven experience (minimum 8-10 years) in IT security, with a focus on financial institutions or banking environments.

In-depth knowledge of IT security frameworks, such as ISO 27001, NIST Cybersecurity Framework, and PCI DSS.

Experience in developing and implementing IT security policies, standards, and procedures.

Proven experience (minimum 8-10 years) in application development and management, preferably in the financial services or banking industry is a MUST

Strong leadership and team management skills, with the ability to effectively guide, mentor, and motivate a team of application professionals.

Excellent communication and stakeholder management abilities, with the capacity to collaborate with cross-functional teams and effectively engage with senior management.

Establish and maintain strong relationships with vendors, ensuring effective management of vendor contracts, service level agreements (SLAs), and support partnerships.

Prepare and present regular reports on application performance, project status, and resource utilization to senior management and relevant stakeholders.

Demonstrated expertise in application governance, including change management, release management, and incident management processes.

Proven experience (minimum 8-10 years) in application development and management, preferably in the financial services or banking industry is a MUST

Strong leadership and team management skills, with the ability to effectively guide, mentor, and motivate a team of application professionals.

Excellent communication and stakeholder management abilities, with the capacity to collaborate with cross-functional teams and effectively engage with senior management.

Establish and maintain strong relationships with vendors, ensuring effective management of vendor contracts, service level agreements (SLAs), and support partnerships.

Prepare and present regular reports on application performance, project status, and resource utilization to senior management and relevant stakeholders.

Demonstrated expertise in application governance, including change management, release management, and incident management processes.

Proficient in conducting risk assessments, vulnerability management, and incident response.

Manage and respond to security incidents, including conducting investigations, coordinating with internal teams and external partners, and implementing corrective actions.

Develop and maintain strong relationships with vendors and external partners to enhance the bank's security capabilities.

Proven experience (minimum 8-10 years) in IT security, with a focus on financial institutions or banking environments.

In-depth knowledge of IT security frameworks, such as ISO 27001, NIST Cybersecurity Framework, and PCI DSS.

Experience in developing and implementing IT security policies, standards, and procedures.