IT Security Engineer

JOB DESCRIPTION

• Conduct penetration testing (pentesting) to identify security vulnerabilities in applications, infrastructure, and IT systems.

• Assess infrastructure security, including servers, networks, and system configurations.

• Perform application security assessments to identify vulnerabilities and potential risks.

• Identify, analyze, and document security findings, including their severity and potential business impact.

• Provide recommendations and remediation guidance to address identified vulnerabilities.

• Collaborate with IT and development teams to implement security improvements.

• Conduct security verification and retesting to ensure vulnerabilities have been properly resolved.

• Prepare security assessment reports and maintain relevant technical documentation.

JOB REQUIREMENTS

• Minimum 3 years of experience in IT Security, Information Security, or a related field.

• Hands-on experience in penetration testing and vulnerability assessment.

• Good understanding of infrastructure security, including network, server, and system security.

• Experience assessing web applications, APIs, and other user-facing applications.

• Familiarity with common security vulnerabilities, such as OWASP Top 10.

• Proficiency in using security testing tools such as Burp Suite, OWASP ZAP, Nmap, or similar tools.

• Understanding of security assessment methodologies, risk analysis, and vulnerability remediation.

• Strong analytical, problem-solving, and technical reporting skills.

• Willing to work hybrid, with 3 days onsite in Cirebon and 2 days remote per week.