Cybersecurity

About This Role

This cybersecurity role focuses on ensuring the security of applications through various testing and assessment activities, and by integrating security practices into the development lifecycle. The position suits a professional with experience in application security, penetration testing, or DevSecOps, who can collaborate with development teams to resolve vulnerabilities and maintain compliance with security standards.

Responsibilities

• Conduct Vulnerability Assessment and Penetration Testing (VAPT) for web applications, mobile applications (Android/iOS), APIs, and backend services
• Perform application security testing based on OWASP Top 10, OWASP MASVS, and industry security best practices
• Identify, validate, and assess security vulnerabilities, providing risk ratings and remediation recommendations
• Evaluate application security controls, including authentication, authorization, encryption, session management, API security, and sensitive data protection
• Perform secure code reviews to identify security weaknesses and recommend secure coding improvements
• Integrate and optimize security testing within CI/CD pipelines to support secure software development practices
• Validate security features and perform logical security testing to ensure applications are protected against bypasses and abuse scenarios
• Collaborate closely with Development, QA, and Infrastructure teams to resolve identified vulnerabilities and improve application security posture
• Conduct security re-testing to verify the effectiveness of remediation efforts
• Prepare comprehensive security assessment reports, including executive summaries, technical findings, risk classifications, remediation status, and final recommendations
• Provide security sign-off and recommendations prior to application deployment or production release
• Ensure applications comply with organizational security policies, BSSN security frameworks, and applicable regulations such as UU PDP, OJK, and Bank Indonesia
• Monitor emerging cybersecurity threats, vulnerabilities, and security best practices to continuously improve the organization's application security posture

Requirements

• Bachelor's Degree (S1) in Computer Science, Information Technology, Information Systems, Cybersecurity, or a related field
• Minimum 2–4 years of experience in Application Security, Penetration Testing, Vulnerability Assessment, or DevSecOps
• Strong understanding of OWASP Top 10, OWASP Mobile Top 10, and OWASP MASVS
• Hands-on experience with security testing tools such as Burp Suite Professional, OWASP ZAP, SonarQube, Snyk, Checkmarx, Fortify, Nessus, Trivy, or equivalent
• Strong knowledge of modern authentication and authorization technologies, including OAuth 2.0, OpenID Connect (OIDC), JWT, RBAC, and ABAC