Skip to content

Open nowFirst seen 2 days ago

Senior IT Security Engineer

Noraa & Co.43 open roles

Where
Jakarta, Jakarta, Indonesia
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior IT Security EngineerNoraa & Co. · Jakarta, Jakarta, Indonesia
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Noraa & Co.'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: first seen 2 days ago

The posting

About the Job

Noraa & Co. is supporting a confidential large-scale company in Indonesia that is currently strengthening its technology organization as part of a major business and digital transformation.

The company operates in a business-critical environment where cybersecurity, infrastructure resilience, secure application environments, and operational continuity are essential to supporting large-scale daily operations.

We are looking for a Senior IT Security Engineer who will take a key role in strengthening the company's cybersecurity posture through penetration testing, vulnerability management, threat detection, incident investigation, technical hardening, and security improvement across infrastructure, applications, networks, endpoints, and data environments.

This role is suitable for a hands-on cybersecurity professional with strong technical capability in security engineering, internal penetration testing, SIEM/EDR management, vulnerability assessment, threat hunting, and incident response.

Position Overview

As a Senior IT Security Engineer, you will be responsible for identifying and assessing security vulnerabilities, strengthening technical security controls, improving detection capabilities, and supporting incident response across the company's technology environment.

You will work closely with Infrastructure, DevOps, Application, Database, and other technology teams to ensure vulnerabilities are properly prioritized, risks are mitigated effectively, and systems are configured in accordance with cybersecurity standards, company policies, and security best practices.

Key Responsibilities

  1. Penetration Testing & Security AssessmentConduct scheduled penetration testing on internal infrastructure, applications, and networks to identify security vulnerabilities. Prepare clear security findings and practical remediation recommendations.
  2. Vulnerability Management & Remediation CoordinationManage routine vulnerability scanning activities across the company's technology environment. Coordinate patching, remediation, or technical mitigation with Infrastructure, DevOps, and related teams.
  3. SIEM, EDR & Threat DetectionManage and optimize SIEM and EDR rules to accurately detect potential threats. Tune detection logic to improve alert quality and reduce false positives.
  4. Threat Hunting & Security InvestigationProactively hunt for hidden threats using log-based analysis and data traffic investigation methods. Analyze data packets, system logs, endpoint behavior, and security telemetry to identify potential attack indicators.
  5. Incident Response & Digital ForensicsPerform technical investigations during cybersecurity incidents and support rapid containment or resolution. Collect and analyze digital forensic evidence to support incident handling and root cause analysis.
  6. Security Hardening & Policy ImplementationProvide technical guidance to strengthen the configuration of servers, databases, endpoints, applications, and network devices. Implement and support the company's cybersecurity policies, procedures, and technical security standards.

Qualifications

  • Minimum of 3 years of experience in IT Security, Security Engineering, or Security Operations Center/SOC.
  • Experience in security testing on Android and iOS platforms, as well as securing APIs, microservices, and databases.
  • Strong understanding of the OWASP Top 10.
  • In-depth technical experience in managing SIEM, EDR, and vulnerability management tools.
  • Capable of performing Internal Penetration Testing and Vulnerability Assessments both manually and using tools such as Burp Suite, etc.
  • Able to analyze data packets, system logs, and understand attack techniques based on the MITRE ATT&CK framework.
  • Relevant cybersecurity certifications, training, or professional security qualifications would be an advantage.

Preferred Background

  • Experience working in medium-to-large organizations with complex infrastructure, applications, and security environments.
  • Hands-on exposure to threat hunting, incident response, SIEM/EDR tuning, vulnerability remediation, and internal penetration testing.
  • Familiarity with security frameworks, IT governance, risk management, or compliance-related practices.
  • Experience supporting technology environments with APIs, microservices, mobile applications, databases, and cloud or hybrid infrastructure would be beneficial.
  • Prior experience working closely with Infra/DevOps teams to drive security remediation and secure configuration improvements.

Why Join This Opportunity

This is an opportunity to contribute to a large-scale organization where cybersecurity plays an important role in protecting business continuity, technology operations, and future digital growth.

The role offers exposure to real business-critical systems, complex security challenges, and the opportunity to strengthen cybersecurity capabilities across infrastructure, applications, networks, endpoints, and digital platforms.

As a Senior IT Security Engineer, you will have the opportunity to take ownership of meaningful security initiatives, influence technical remediation, and help improve the organization's overall security maturity.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Noraa & Co.'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Noraa & Co.'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Noraa & Co.'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.