Apply Mate

Job opportunity for Senior Offensive Security Engineer (Penetration Testing) at SMARTM2M Indonesia in KOTA BANDUNG, JAWA BARAT, Indonesia. Qualification: Responsibilities Plan, scope, and execute penetration tests following NIST SP 800-115 with formal authorization, Rules of Engagement, execution logs, and structured reporting plus retesting. Conduct web and API testing aligned to the OWASP Web Security Testing Guide with traceable test cases and coverage mapping for application and authentication/authorization flows. Structure engagements per PTES phases for consistency across pre-engagement, intelligence gathering, exploitation, post-exploitation, and reporting. Map techniques and findings to MITRE ATT&CK to support SOC/DFIR integration and detection engineering backlogs. Produce PCI-ready deliverables, including Rules of Engagement, segmentation testing where applicable, and evidence artifacts suitable for assessors. Write clear, prioritized remediation guidance with verification steps and retest results suitable for audits and leadership briefings. Collaborate with engineering and security stakeholders to align test scope with risk priorities and SDLC timing, leveraging OWASP guidance for application contexts. Minimum qualifications Demonstrated delivery of end-to-end penetration tests under NIST SP 800-115 and OWASP WSTG, including reporting and retesting workflows. One or more of the following certifications as a minimum: CEH, PNPT, CRTO, CRTP, or CPTS (or equivalent practical credential) to evidence hands-on capability across pentest or adversary tradecraft. Familiarity with PTES for engagement structure and with MITRE ATT&CK for technique mapping and narrative clarity. Ability to produce auditable artifacts suitable for PCI-aligned programs when required by clients. Preferred qualifications OSCP as the primary preferred credential for rigorous, hands-on penetration testing capability recognized by employers globally. Additional plus: GPEN or CREST CRT for methodology depth and external assurance signaling in regulated environments. Experience translating ATT&CK-mapped findings into detection use-cases and engineering backlogs with stakeholders.

Job opportunity for Tier 1 SOC Analyst at PT Neotech Cakrawala Indonesia in KOTA YOGYAKARTA, DAERAH ISTIMEWA YOGYAKARTA, Indonesia. Qualification: Job Description: Melakukan monitoring keamanan jaringan & sistem 24/7 Menganalisa dan menindaklanjuti insiden keamanan (incident response) Melakukan investigasi dan reporting terhadap security alert Berkoordinasi dengan tim IT terkait mitigasi risiko keamanan Requirements: Pendidikan minimal S1 Teknik Informatika / Sistem Informasi / sejenis Memahami konsep Cyber Security, SIEM, Firewall, IDS/IPS Pengalaman minimal 1 tahun sebagai SOC/IT Security (fresh graduate dipersilakan melamar jika memiliki skill relevan) Mampu bekerja dalam sistem shift Memiliki sertifikasi security menjadi nilai tambah

Job opportunity for Product Support Engineer at PT Optima Solusindo Informatika in KOTA ADM. JAKARTA BARAT, DKI JAKARTA, Indonesia. Qualification: Qualifications: Minimum of a Diploma in Information Technology or a related field. 1–2 years of experience in a technical product role. Fresh graduates with relevant internship experience are also encouraged to apply. Solid understanding of cybersecurity concepts such as Anti-Virus, Data Backup, and IT Security. Strong technical aptitude, quick learner, self-motivated, and collaborative team member Roles & Responsibilities: Conduct product presentations, proof of concept (POC) demonstrations, and troubleshooting for clients. Perform product implementation for solutions such as Anti-Virus, Backup, Security, Linux, and Privileged Access Management (PAM). Provide technical support to partners and clients.

Job opportunity for Pentester Internship at PT Widya Adijaya Nusantara (Widya Security) in Kabupaten Sleman, DI Yogyakarta, Indonesia. Qualification: Jobdesk : Menentukan proses scoping pengujian keamanan (web, mobile, API, network, cloud, internal/external) Menyusun dan menegakkan Rules of Engagement (RoE) serta metodologi pengujian (black box, gray box, white box) Berkoordinasi dengan stakeholder (klien, engineering, product, infra) untuk memahami aset dan tujuan pengujian Melakukan advanced penetration testing & exploitation pada: Web Application Mobile Application (Android/iOS) API Network & Infrastructure Cloud Environment 5. Melakukan simulasi real-world attack scenario, seperti: Phishing simulation Credential harvesting Lateral movement & pivoting Command & Control (C2) scenario 6. Menganalisis tingkat risiko, dampak bisnis, dan kemungkinan eksploitasi dari setiap temuan 7. Menyusun laporan penetration testing yang komprehensif (Executive Summary & Technical Report) 8. Memberikan rekomendasi mitigasi yang realistis, aplikatif, dan sesuai kondisi sistem 9. Melakukan presentasi hasil temuan kepada klien atau stakeholder internal 10. Menjadi mentor / reviewer bagi pentester junior (code review, methodology review, report review) 11. Mengikuti perkembangan terbaru terkait vulnerability, exploit, dan tren keamanan siber Kualifikasi: Mahasiswa aktif & fresh graduate Memahami secara mendalam Cyber Security Fundamentals (Networking, OS, TCP/IP, HTTP/HTTPS) Menguasai Web & API Security, terutama OWASP Top 10 Familiar dengan standar & metodologi: PTES OWASP Testing Guide NIST / MITRE ATT&CK 7. Menguasai tools keamanan seperti: Burp Suite, Nmap, Metasploit SQLmap, Nikto, Gobuster, ffuf Hydra, John the Ripper, Hashcat 8. Memiliki kemampuan scripting (Python, Bash, atau JavaScript) untuk automation & custom exploit 9. Memiliki kemampuan analisis, problem solving, dan dokumentasi yang sangat baik 10. Mampu berkomunikasi teknis maupun non-teknis dengan jelas

Job opportunity for VP of Information Security at Pt Tilaka Nusa Teknologi in Kota Jakarta Barat, DKI Jakarta, Indonesia. Qualification: Job Qualifications: Lulusan S1 dari Teknik Informatika/Sistem Informasi/Teknologi Informasi Minimal 5–7 tahun pengalaman di bidang Information Security Minimal 2–3 tahun pengalaman dalam posisi leadership / managerial Berpengalaman terlibat dalam audit eksternal dan audit regulator Memiliki rekam jejak dalam membangun atau meningkatkan security posture organisasi Kompetensi & Soft Skills Analytical thinking dan risk-based mindset yang kuat Komunikatif, mampu menjelaskan isu teknis kepada Direksi, regulator, dan tim teknis Keseimbangan antara strategic planning dan technical execution Mampu bekerja secara kolaboratif lintas fungsi (Technology, Product, Compliance, Business) Memiliki leadership yang kuat, khususnya dalam situasi krisis dan incident response Sertifikasi Profesional (Mandatory) Wajib memiliki salah satu sertifikasi berikut (lebih diutamakan jika memiliki lebih dari satu): * CISM (Certified Information Security Manager) * CISA (Certified Information Systems Auditor) * CISSP (Certified Information Systems Security Professional) * CCISO * Security X * GISP Job Descriptions: Menyusun dan mengeksekusi strategi keamanan informasi perusahaan Menjamin kepatuhan terhadap regulasi dan standar internasional Mengelola audit internal dan eksternal Mengawasi security architecture dan security operations Memimpin incident response dan penguatan security control Memberikan laporan berkala kepada Direksi terkait risiko dan posture keamanan perusahaan Job Qualifications: Kompetensi Framework & Governance Memiliki pemahaman mendalam dan pengalaman implementasi terhadap: * ISO/IEC 27001 (ISMS) * ISO/IEC 27701 (PIMS) * NIST Cybersecurity Framework * NIST SP 800 Series * Risk Management Framework * Security policy development dan audit management * Regulatory compliance readiness dan audit handling Kompetensi Teknis Memiliki latar belakang teknis yang kuat dan pengalaman langsung pada area berikut: * Network Security * Application Security * Cloud Security * Vulnerability Management * Incident Response * AI Security (nilai tambah) Kompetensi Spesifik Industri * Pengetahuan dan/atau pengalaman terkait Public Key Infrastructure (PKI) * Memahami lifecycle sertifikat elektronik * Memahami konsep cryptography, key management, dan penggunaan HSM * Pengalaman di industri regulated (Financial Services, Telco, CA/PSrE, Digital Identity) menjadi nilai tambah

Job opportunity for Information Security & Data Protection at PT. Infomedia Solusi Humanika in Kota Jakarta Barat, DKI Jakarta, Indonesia. Qualification: Posisi: Information Security & Data Protection Tanggung Jawab Utama : Mendukung penerapan kebijakan dan prosedur keamanan informasi di lingkungan perusahaan. Memastikan sistem dan data terlindungi dari ancaman internal maupun eksternal. Membantu memastikan pengelolaan data sesuai dengan regulasi yang berlaku, termasuk UU Perlindungan Data Pribadi (UU PDP). Mengawasi proses pengumpulan, penyimpanan, dan penggunaan data. Melakukan pemantauan terhadap potensi ancaman keamanan siber. Membantu investigasi dan pelaporan insiden keamanan informasi. Melakukan identifikasi dan penilaian risiko keamanan informasi. Mendukung kegiatan audit internal dan eksternal serta memastikan kepatuhan terhadap standar yang berlaku. Mengelola kontrol akses pengguna dan memastikan penerapan prinsip least privilege. Berkoordinasi dengan tim IT dalam pengamanan jaringan, server, dan aplikasi. Menyusun laporan keamanan informasi dan dokumentasi kebijakan serta prosedur terkait. Mendukung pelaksanaan pelatihan dan sosialisasi terkait keamanan informasi dan perlindungan data. Kualifikasi : Minimal S1 di bidang Teknologi Informasi, Sistem Informasi, Ilmu Komputer, Keamanan Siber, atau bidang terkait. Memiliki pengalaman kerja 1–3 tahun di bidang Information Security, Cyber Security, IT Risk, atau Data Protection. Fresh graduate dengan pengalaman magang yang relevan dipersilakan melamar. Memahami dasar-dasar keamanan informasi dan manajemen risiko. Memiliki pengetahuan tentang: ISO/IEC 27001 dan NIST Cybersecurity Framework, UU Perlindungan Data Pribadi (UU PDP) Indonesia, Network Security, Endpoint Security, dan Access Control, Enkripsi, firewall, antivirus, dan vulnerability assessment. Familiar dengan tools keamanan seperti SIEM, DLP, Vulnerability Scanner, dan IAM menjadi nilai tambah. Memahami dasar cloud security (AWS, Azure, atau Google Cloud) menjadi keunggulan. Sertifikasi (Nilai Tambah) : CompTIA Security+, ISO/IEC 27001 Foundation atau Lead Implementer, Certified Ethical Hacker (CEH), Certified Information Systems Auditor (CISA) – Foundation Level, Certified Data Protection Officer (CDPO) atau sejenisnya.