IT Security Engineer
Summary
Security engineer focused on offensive testing: runs penetration tests and vulnerability assessments across applications, APIs, servers, and networks, documents findings with severity and business impact, and works with IT/dev teams on remediation and retesting. Core toolkit: Burp Suite, OWASP ZAP, Nmap; hybrid role based in Cirebon (3 days onsite).
Salary: Rp 3.000.000 – Rp 4.500.000 per month
JOB DESCRIPTION
Conduct penetration testing (pentesting) to identify security vulnerabilities in applications, infrastructure, and IT systems.
Assess infrastructure security, including servers, networks, and system configurations.
Perform application security assessments to identify vulnerabilities and potential risks.
Identify, analyze, and document security findings, including their severity and potential business impact.
Provide recommendations and remediation guidance to address identified vulnerabilities.
Collaborate with IT and development teams to implement security improvements.
Conduct security verification and retesting to ensure vulnerabilities have been properly resolved.
Prepare security assessment reports and maintain relevant technical documentation.
JOB REQUIREMENTS
Minimum 3 years of experience in IT Security, Information Security, or a related field.
Hands-on experience in penetration testing and vulnerability assessment.
Good understanding of infrastructure security, including network, server, and system security.
Experience assessing web applications, APIs, and other user-facing applications.
Familiarity with common security vulnerabilities, such as OWASP Top 10.
Proficiency in using security testing tools such as Burp Suite, OWASP ZAP, Nmap, or similar tools.
Understanding of security assessment methodologies, risk analysis, and vulnerability remediation.
Strong analytical, problem-solving, and technical reporting skills.
Willing to work hybrid, with 3 days onsite in Cirebon and 2 days remote per week.