Security Engineer

Responsibilities

1. Manage cybersecurity every day
   Keep the company's computers, servers, cloud systems, networks, Microsoft 365, and employee devices secure.
2. Handle security incidents
   When something suspicious happens—such as malware, phishing, a compromised account, or a data breach—you investigate what happened, contain the problem, fix it, and make sure it doesn't happen again.
3. Find and fix security weaknesses
   Regularly look for vulnerabilities in systems and applications, monitor security alerts, and make sure important security risks are addressed.
4. Manage security policies and compliance
   Create and maintain cybersecurity policies, standards, and procedures, and make sure the company follows them.
5. Work with ISO 27001
   Help maintain the company's ISO 27001 Information Security Management System (ISMS), prepare for audits, maintain required documentation, and make sure security controls are working.
6. Assess security risks
   Look at potential threats and weaknesses, decide how serious they are, and recommend ways to reduce the risk.
7. Work with different teams
   You'll communicate with IT, management/business teams, auditors, and outside security vendors or partners.
8. Improve security systems and processes
   Review how the company currently protects its systems and suggest better ways to design, configure, and operate them.
9. Teach employees about security
   Help run cybersecurity awareness programs, such as phishing training, security briefings, and employee education.
10. Guide junior security staff
    Help less-experienced security engineers develop their technical skills and handle security tasks.

Requirements

1. Someone with at least 5 years of cybersecurity experience, preferably someone who has worked inside a company rather than mainly works for a consulting company or system integrator.
2. Possess hands-on experience with:

• Microsoft 365 — securing email, Teams, SharePoint, etc.
• Entra ID — Microsoft's identity and access management system (formerly Azure AD)
• Endpoint security — protecting laptops, desktops, and other employee devices
• SIEM — collecting and analyzing security logs and alerts
• EDR — detecting and responding to threats on computers
• Security operations — monitoring and responding to security threat
• ISO 27001 — implementing controls and preparing for auditsCertifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, or Security+ are a plus.

1. Excellent communication and presentation skills.
2. Strong problem-solving skills and attention to detail.
3. Proficient in English and Bahasa (both written and verbal).