IT Security Analyst - Jakarta - WFO (ID: 714145)

JOB DESCRIPTION

• IT Security Consultant Level – Mampu menjadi technical advisor dan partner bagi Head of IT
• End-to-End Security Architecture – Memahami security architecture secara menyeluruh
• Implementation & Operation – Memiliki pengalaman implementasi security tools/technology baru serta mampu melakukan assessment, design, integration, deployment, operation, dan improvement terhadap existing maupun new technology
• Security Analysis & Threat Hunting – Mampu melakukan security analysis, incident investigation, log analysis, incident handling, serta threat hunting, khususnya DLP dan Data Security
• Security Technology & Best Practice – Memahami technology dan security best practice/policy pada area Identity, Network, Security Operations, Data, AI, Cloud & Infrastructure, termasuk CASB, Reverse Proxy, Shadow IP, Sensitive Labeling, DRM, Data Lineage Security, Zero Standing Privilege, Active Directory, dan Workload Security
• Incident & Technical Analysis – Memiliki pemahaman mendalam mengenai log source, security alert, incident response, malware/threat, root cause analysis, serta remediation
• Stakeholder & Vendor Management – Mampu menjadi koordinator dan technical counterpart bagi vendor/third party, SOC, IT team, user, management, dan executive, khususnya terkait alert, incident, remediation, policy, implementation, dan sosialisasi
• Security Advisory & Risk Assessment – Mampu memberikan rekomendasi security secara independen serta memahami best practice pengamanan end-to-end dari User termasuk identifikasi security gap, risk, control, dan remediation

JOB REQUIREMENT

• Minimal 5 tahun pengalaman di bidang IT Security/Cyber Security, dengan pengalaman sebagai IT Security Consultant, Security Architect, Senior Security Analyst, atau posisi setara
• Memiliki pengalaman end-to-end security implementation dan operation, serta memahami security architecture pada area Identity, Network, Endpoint, Application, Database, Data, Cloud & Infrastructure
• Memiliki kemampuan security analysis, incident handling, log analysis, dan threat hunting, khususnya terkait DLP/Data Security, serta memahami security technology dan best practice seperti CASB, PAM, SIEM, EDR, Active Directory, Reverse Proxy, Zero Standing Privilege, dan Workload Security
• Memiliki kemampuan stakeholder dan vendor management, serta mampu berkomunikasi dengan Head of IT, executive, user, SOC, vendor/third party, dan technical team
• Memiliki analytical thinking, problem solving, consulting, dan communication skills yang kuat serta mampu memberikan security recommendation secara independen berdasarkan risk, business requirement, dan security best practice