Astra Graphia Information Technology (AGIT) is a Digital Service Provider, provides one stop Solution on Digital Services. Since 1983, AGIT is part of PT Astra International Tbk Group, a conglomeration company in Indonesia that currently has 212 subsidiaries and affiliate companies with 7 line of businesses (automotive, financial services, heavy equipment, agribusiness, information technology, infrastructure & logistics, and property). AGIT itself is owned 100% by PT Astra Graphia Tbk

As a Digital Service Provider, AGIT has transformed its business not only focusing on providing ICT infrastructure and application related services but more towards on what we called as a One-Stop-Solutions on Digital Services, both in on-premise and cloud infrastructure model.

We bring the concept of digitize things (digitize everything), to help and to assist our customers in performing their digital transformation through the implementation on digital technology & digital solutions.

We have four main pillars in our Digital Solution Portfolios that cover the entire journey required to conduct digital transformation starting from Digital Strategy, Digital ICT Foundation, Digital Platform, and Digital Services

PT Astra Graphia Information Technology

<ol style="list-style-type: upper-alpha;">
	<li>IT Security jaringan</li>
</ol>

<ul>
	<li>Menguasai perangkat security jaringan (Firewall, IPS, WAF, dll)</li>
	<li>Kemampuan menganalisa port yang dibutuhkan</li>
	<li>Implementasi patch di perangkat jaringan</li>
	<li>Kemampuan korelasi event dari perangkat security yang ada</li>
	<li>Update dengan perkembangan teknologi security</li>
</ul>

<ol style="list-style-type: upper-alpha;">
	<li>IT Security server</li>
</ol>

<ul>
	<li>Menguasai security server (baseline security configuration, antivirus, firewall server)</li>
	<li>Menguasai patch di OS Windows dan Linux</li>
	<li>Menguasai security terkait Office 365</li>
	<li>Menguasai keamanan email (SMTPS, dll)</li>
	<li>Kemampuan korelasi event dari log di OS</li>
	<li>Update dengan perkembangan teknologi security</li>
</ul>

Jobdesc:

<ol>
	<li>Perform day to day operations for Security Analyst</li>
	<li>Perform monitor, manage, and configure security tools, review incidents to assess their urgency, and escalate incidents if necessary.</li>
	<li>Maintain the highest SLA Standard for Operations and Improvement.</li>
	<li>Fine-tune SIEM rules to reduce false positive and remove false negatives.</li>
	<li>Learn new attack patterns, actively participate in security forums.</li>
</ol>

IT Security

OCBC Indonesia (formerly known as OCBC NISP) is the fourth oldest bank in Indonesia, which was founded in April 4th 1941 in Bandung under the name of NV Nederlandsch Indische Spaar En Deposito Bank.

OCBC Indonesia then grown to be a solid and dependable bank, especially in providing service for small business segments. It officially became a commercial bank in 1967, Foreign exchange bank in 1990 and public corporate in Indonesia Stock Exchange in 1994.

In the end of 1990, OCBC Indonesia managed to pass the Asia monetary crisis and the fall of banking industry without any recapitalization obligation aid from the government. OCBC Indonesia became one of the first few banks to resume lending during the crisis. This initiative enabled the Bank to note a high growth.

OCBC Indonesia good reputation and its promising growth has attracted the interest of International Finance Corporation (IFC), a part of World Bank Group, which then became a shareholder in 2001-2010 and from OCBC Singapore which then became the shareholder OCBC Indonesia. 

With the support from OCBC Bank-Singapore, OCBC Indonesia has implemented aggressive programmes to strengthen the infrastructure, human resources, information and technology, as well as office networking.

PT Bank OCBC NISP, Tbk is licensed and supervised by the Otoritas Jasa Keuangan (OJK) and is an LPS participant.

PT Bank OCBC NISP, Tbk

Responsibilities:

Yellow Team [Vacancy Closed]

<ul>
	<li>As a Security Architect - Create and enhance security architecture</li>
	<li>Assessing complex IT environments and mapping the data flow of the through systems/applications and organizational functions.</li>
	<li>Architecting and designing cybersecurity solutions for multi-tenant managed security services environment</li>
	<li>Designing shared services / cloud infrastructure environment</li>
	<li>Acting as an expert in cyber defense activities, and building of substantial experience in design, implementation and validation phases for security monitoring projects (SIEM architecture design, IDSP deployment).</li>
	<li>Facilitating architecture sessions to develop enterprise security architecture that fits within clients existing environment.</li>
</ul>

 

Green Team 

<ul>
	<li>Design and Implement Security Solutions: Develop and configure network security architecture, including firewalls, VPNs, and intrusion detection systems.</li>
	<li>Conduct Risk Assessments: Regularly evaluate network security measures and conduct vulnerability assessments to identify weaknesses.</li>
	<li>Documentation and Reporting: Maintain documentation of network security policies, procedures, and incidents, providing detailed reports to management.</li>
</ul>

 

Blue Team (L1 - Shift Working) 

<ul>
	<li>Act as Incident first responder for a 24/7 SOC Operations</li>
	<li>Monitor security sensors and review logs to identify network anomalies or intrusions</li>
	<li>Perform initial analysis of security alerts</li>
	<li>Escalate security incidents using established policies and procedures in a timely manner</li>
</ul>

 

Blue Team (L2 - SOC Analyst) 

<ul>
	<li>Work with stakeholders to analyse potential security incidents, identifying root cause and implement mitigation step(s)/ remedial action(s)</li>
	<li>Perform Response action based on standardize workflow</li>
	<li>Assist with the development of incident response plans, workflows, and SOPs</li>
	<li>Provide threat and vulnerability analysis security advisory services</li>
</ul>

 

Red Team

<ul>
	<li>Deliver Red Team Exercises</li>
	<li>Conduct state-of-the-art penetration testing against web applications, network infrastructures, user workstations, network appliances and other devices and technologies.</li>
	<li>Manual and automated security testing of Web applications, APIs, and Mobile Applications.</li>
	<li>Do code review</li>
	<li>Static and Dynamic testing (SAST &amp; DAST) of thick applications</li>
	<li>Develop Proof-of-Concept (PoC) for the identified vulnerabilities.</li>
	<li>Provide remediation guidance to identified vulnerabilities.</li>
	<li>Develop and execute security testing project plans</li>
</ul>

IT Security Engineer

NICEpay is an Internet Payment Gateway Provider which brings you a reliable technical support and proven expertise in local system integration, empowering merchant boarding, and maintenance. We are empowering merchant to secure its e-commerce revenue streams from anywhere in the world with our enhanced Fin-Tech solution. We are IT company working with banks and online merchant in delivering Internet Payment Gateway Solution for your e-commerce business.

PT IONPay Networks (NICEPAY)

<ul>
	<li>Responsible for the daily operational of Security, as follow:</li>
	<li>Monitoring Antivirus</li>
	<li>Configure and Monitoring Hiware, IPS system system on DC and DRC</li>
	<li>Check firewall activity on DC and DRC by Cisco Security Manager (CSM) &amp; FortiAnalyzer</li>
	<li>Report and escalated for any activity related daily operational</li>
	<li>Execute action plan Preventive Maintenance time and changes request document</li>
	<li>Support project team related implementation</li>
	<li>Collaborate with other department and vendor related to IT security operation</li>
	<li>Do the vulnerability scan and penetration test for new system/application</li>
</ul>

IT Compliance & Security

PT. DANS MULTI PRO sebuah perusahaan Teknologi Informasi (Information Technology), saat ini kami mengkhususkan diri sebagai sebuah perusahaan penyedia solusi layanan TI di semua sektor industri. Solusi layanan TI yang kami hasilkan akan membantu perusahaan dalam menganalisa implikasi bisnis, biaya, dan peraturan yang ada untuk menghasilkan suatu roadmap teknologi yang digunakan oleh perusahaan tersebut.

Pengalaman kami menunjukkan bahwa dengan menyediakan lingkungan kerja yang nyaman dan menantang bagi para pegawai kami, berbagai inovasi akan muncul untuk menghasilkan suatu produk yang berkualitas. Tangan tangan karyawan profesional kami terus menghasilkan inovasi untuk memenuhi kepuasan pelanggan

Selain memiliki tim profesional untuk membantu pelanggan, kami pun membangun aliansi strategis dengan sejumlah partner teknologi nasional, regional, maupun global untuk memperkuat penawaran solusi kami.

Dans Multi Pro

<ul>
	<li>Contribute to Company program around penetration testing and overall web application security</li>
	<li>Responsible for scoping and execution of penetration tests against a variety of technologies including web application, mobile and infrastructure</li>
	<li>Provide network/application vulnerability assessment and penetration testing services globally through a comprehensive testing process, identifying weaknesses and vulnerabilities within the system and proposing countermeasures</li>
	<li>Proven ability to perform computer network vulnerability assessment and penetration testing</li>
	<li>Act as the subject matter expert for Company Information Security and the Company on penetration testing</li>
	<li>Act as the subject matter expert for the Company on all aspects of penetration testing</li>
	<li>Mentor the IT Security team</li>
</ul>

Senior IT Security

Renos is an end-to-end online marketplace that specialized in home and living products. We aim to bridge direct connections between manufacturers, service providers, and homeowners with AI technology and industry-led operation quality. This enables buyers to conveniently choose products, compare prices, access special deals, and try out samples before putting the right items in shopping carts at our one-stop service platform.

Renos.id

<ul>
	<li>Develop, execute and track the performance of security measures to protect information and network infrastructure and computer systems.</li>
	<li>Design computer security strategy and engineer comprehensive cybersecurity architecture.</li>
	<li>Identify, define and document system security requirements and recommend solutions to management.</li>
	<li>Configure, troubleshoot and maintain security infrastructure software and hardware.</li>
	<li>Install software that monitors systems and networks for security breaches and intrusions.</li>
	<li>Monitor systems for irregular behavior and set up preventive measures.</li>
	<li>Plan, develop, implement and update company’s information security strategy.</li>
	<li>Educate and train staff on information system security best practices.</li>
</ul>

Cyber Security Engineer

Focus Solusi Infotama adalah Perusahaan penyedia layanan informasi teknologi terkemuka di Indonesia. Kami membantu pelanggan kami dengan mengoptimalisasi operasional teknologi informasi mereka dan kami membantu menjaga keamanan digital data Perusahaan pelanggan kami dengan memberikan layanan Solusi serta konsultasi dalam layanan digital yang di dukung oleh Beragam Solusi hardware & software yang dioptimalisasi dalam berbagai macam ekosistem dan reaktualisasi teknologi infrastruktur serta sistem keamanan cyber security.

PT Focus Solusi Infotama

•Policy Management &amp; Push: Secara rutin melakukan push dan implementasi kebijakan keamanan (policy rules) pada perangkat Next-Generation Firewall (NGFW) dan Web Proxy berdasarkan permintaan perubahan yang disetujui.

•Troubleshoot &amp; Blocking: Melakukan troubleshooting dasar terkait implementasi policy dan membantu dalam proses blocking atau unblocking lalu lintas/situs sesuai dengan protokol keamanan.

•Traffic Analysis (Dasar): Melakukan analisis traffic dasar pada log Firewall dan NetFlow untuk memverifikasi kebijakan, mengidentifikasi anomali, dan mendukung investigasi insiden kecil.

•Configuration Support: Membantu dalam konfigurasi, backup, dan pemeliharaan rutin pada perangkat keamanan (Firewall, IDS/IPS, Proxy) di bawah bimbingan Senior Engineer

•Log Verification: Memastikan semua perangkat utama berhasil mengirimkan log ke platform SIEM dan membantu dalam validasi kualitas data log.

•Documentation: Membantu membuat dan memperbarui Standard Operating Procedure (SOP) dan runbook terkait perubahan policy dan troubleshooting insiden harian.

Junior Security Engineer

The transaction is the lungs of the breathing economy, that is why our first step starts with a big dream to pave the way towards freedom of transaction. Since 2007, DOKU has been the first electronic payment system and risk management company in Indonesia. 

From paying and getting paid to transfer funds, all are possible with DOKU. For more than one decade, we have grown together alongside large and medium scaled companies to personal sellers from various lines of business, ranging from transportation, tourism, insurance, retail, donation, communities, and many more. Collaboration with partners such as local and international banks, also non-banking institutions has strengthened our reputation as a trusted local electronic payment solution. 

Our business grows together with our partners’ businesses. Thus we have built a payment ecosystem that is supportive and strengthens theirs. The formation of three product pillars that responds to all business needs across all layers of society has marked our transformation from “The Better Way to Pay” becoming “Think Beyond Payments”. The three winning product pillars comprise Payment Gateway and Transfer Services for Corporate, SMEs, Start-ups, and Local and International MSMEs. The last product pillar, Collaborative Commerce, is designed to empower communities and personal usage.

DOKU, PT NUSA SATU INTI ARTHA

What Will You Do: 

<ol>
	<li>Test application security before deployment</li>
	<li>Test application penetration and also perform ASV scans regularly</li>
	<li>Understand, experience and be able to work within the ISO27001 and PCI-DSS standard framework</li>
	<li>Subscribe or have a source of the latest information about vulnerabilities</li>
	<li>Able to make reports on findings or if there are security anomalies.</li>
	<li>Able to provide technical advice or solutions to the IT team and software developer team</li>
	<li>Follow up on the results of vulnerability findings to the relevant team</li>
	<li>Able to use Security Testing Tools or create your own tools</li>
	<li>Must document all work processes in detail</li>
</ol>

IT Security Officer

Sinergi yang saling menguntungkan
Tahun 2015 menjadi titik balik bagi Bank Mandiri Taspen, dimana Bank Mandiri Taspen memutuskan untuk menjadi bank yang unggul di nasional pada segmen pensiunan dan UMKM, yang diwujudkan dalam program sinergi yang dilaksanakan melalui 2 (dua) kontribusi utama dan benefit, yaitu PT. Bank Mandiri (Persero) Tbk. dan PT. Taspen (Persero).

Visi Bank Mandiri Taspen : Menjadi mitra terbaik dan terpercaya dalam memberdayakan dan mensejahterakan.
Misi Bank Mandiri Taspen :
1. Menciptakan pertumbuhan bisnis dan kesejahteraan melalui produk dan layanan keuangan terbaik
2. Fokus pada kebutuhan UMKM dan Pensiunan dengan menyelaraskan kepentingan ekonomi, sosial dan lingkungan

PT Bank Mandiri Taspen

<ul>
	<li>Melakukan evaluasi risiko keamanan jaringan dan mengidentifikasi kelemahan potensial.</li>
	<li>Menyusun dan mengimplementasikan strategi peningkatan keamanan jaringan.</li>
	<li>Memantau aktivitas jaringan untuk mendeteksi anomali dan potensi ancaman.</li>
	<li>Melakukan penilaian kerentanan dan pengujian penetrasi secara berkala.</li>
	<li>Mengkonfigurasi dan memelihara firewall, sistem deteksi/pencegahan intrusi (IDS/IPS), serta solusi NAC, WAF, dan NDR.</li>
	<li>Menanggapi insiden keamanan dan memastikan pemulihan sistem yang cepat.</li>
	<li>Menjamin bahwa hanya pengguna yang sah memiliki akses ke jaringan.</li>
	<li>Memastikan keamanan data yang ditransmisikan melalui jaringan.</li>
	<li>Merancang strategi pencegahan serangan siber yang proaktif.</li>
</ul>

Network Security Officer

About the Role:

Analyze events and identify information security risks and follow up on problems/violations/incidents from company systems and networks.

 

What Will You Do :

<ul>
	<li>Monitor and analyze security events in systems and networks</li>
	<li>Manage security devices both on-premise and cloud</li>
	<li>Follow up on information security alerts by incident response procedures</li>
	<li>Subscribe or have a source of the latest information about vulnerabilities</li>
	<li>Conduct regular security reviews and document reports regarding security violations</li>
	<li>Know the PCI DSS and ISO 27001 framework standards</li>
	<li>Follow up on the results of analysis/identification of vulnerabilities in systems and networks</li>
	<li>Must document all work processes in detail</li>
</ul>

IT Security Operation Center

Mendokumentasikan dan mengadministrasikan seluruh nota dan form administrasi yang diterima oleh Governance &amp; Planning (GP) secara tertib, lengkap, dan sesuai ketentuan yang berlaku.

Melakukan pembaruan dan pemeliharaan berkala terhadap database Tim GP, termasuk memastikan keakuratan dan konsistensi data.

Menyediakan dan mengelola dashboard monitoring untuk memantau status serta perkembangan seluruh database secara real-time guna mendukung proses pengambilan keputusan.

Melakukan revamp dan standarisasi template database terkait budgeting, policy, audit, dan awareness, agar lebih efisien, serta selaras dengan kebutuhan organisasi.

Memberikan dukungan administratif dan analitis dalam kegiatan koordinasi internal maupun eksternal yang berkaitan dengan pengelolaan data dan pelaporan GP.

Security Governance & Planning Internship

Kompas Gramedia, through its more than 50 years of history, is striving for one goal: enlightening and empowering Indonesia. To ensure that we are able to serve the nation for another 50 years, we are undergoing a digital transformation; strengthening and expanding our solid business pillars by developing new digital business initiatives.

Our vision is to enlight all the people in Indonesia with all the knowledge we have.

Kompas Gramedia

<ul>
	<li>Melakukan patroli rutin untuk mengawasi keamanan di sekitar area yang menjadi tanggung jawabnya, baik di dalam maupun di luar gedung.</li>
	<li>Mengawasi dan memastikan akses masuk dan keluar gedung, serta memastikan bahwa hanya orang yang berwenang yang dapat masuk ke area tertentu.</li>
	<li>Memantau dan mengawasi CCTV secara berkala.</li>
	<li>Mengambil langkah cepat dan tepat jika terjadi keadaan darurat, seperti kebakaran, bencana alam, atau tindakan kriminal.</li>
	<li>Mengarahkan evakuasi dan membantu karyawan atau tamu keluar dengan aman.</li>
	<li>Mengumpulkan dan mendokumentasikan informasi terkait insiden atau situasi keamanan yang terjadi sebagai bagian dari prosedur pelaporan.</li>
	<li>Menjalankan prosedur keamanan yang telah ditetapkan perusahaan, termasuk pemeriksaan barang bawaan atau kendaraan yang keluar masuk.</li>
</ul>

Security, PT Dyandra Promosindo

PT Mediatrac Sistem Komunikasi - We Unlock the Value of Your Data

We are powered by the most advanced analytics technology and the most comprehensive data library in Indonesia.

DattaBot

<ul>
	<li>Design, build, and manage scalable and secure cloud infrastructure (primarily AWS and Azure).</li>
	<li>Automate infrastructure provisioning and deployments using Infrastructure as Code (IaC), such as Terraform.</li>
	<li>Ensure high availability, performance, and cost-efficiency across systems.</li>
	<li>Implement and maintain security controls across cloud and hybrid environments.</li>
	<li>Monitor infrastructure for threats, vulnerabilities, and incidents; respond with appropriate action plans.</li>
	<li>Build and maintain secure CI/CD pipelines.</li>
	<li>Support internal and external audits and help maintain compliance with standards like ISO 27001 and SOC 2.</li>
	<li>Collaborate with development teams to embed security into the software development lifecycle.</li>
	<li>Work closely with engineering and product teams to align infrastructure and security with business goals.</li>
	<li>Share knowledge and mentor junior engineers, fostering a strong culture of security and reliability.</li>
</ul>

Security and Devops Engingeer

Bumi Amartha Teknologi Mandiri or “AMARTEK” was established to provide information technology solutions. Our mission from the very first day has been to cultivate professional relationships with our clients to provide effective and reliable information technology solutions for their needs. The team at "AMARTEK" is equipped with a highly developed skillset developed over decades of experience not only in information technology but also in business processes across a range of industry sectors. This business experience makes us uniquely positioned to offer solutions promising greater operational efficiency, productivity gains and cost savings for each of our clients, regardless of their industry.

As an established technology-intensive company, we pride ourselves on providing a comprehensive suite of solutions comprising of Infrastructure Consultancy, on/offsite services, Custom software and web development, Talent Augmentation, and enterprise architecture consulting. Our team consistently delivers state-of-the-art solutions in various areas including, but not limited to: integrated business solutions, system applications, product development and professional services.

At "AMARTEK", we guarantee rapid, reliable and robust information technology solutions that work. 

PT Bumi Amartha Teknologi Mandiri

<ul>
	<li>Conduct Cyber Security Assessments to identify vulnerabilities and recommend improvements.</li>
	<li>Implement security enhancements by assessing current security measures and staying updated on emerging cyber threats and trends.</li>
	<li>Develop and conduct Security Awareness Programs to educate employees on cybersecurity best practices.</li>
	<li>Create, review, and maintain Information Security Management System (ISMS) documentation.</li>
	<li>Develop, consolidate, and review Cyber Security Policies &amp; Procedures to ensure compliance with industry standards and regulations.</li>
	<li>Assist in audit-related documentation and compliance efforts for regulators and external auditors.</li>
	<li>Support the development and documentation of Cyber Security Maturity Assessments &amp; Frameworks.</li>
	<li>Assist in Cyber Security Risk Assessments &amp; Advisory activities to mitigate security risks effectively.</li>
</ul>

Cyber Security Risk & Advisory Officer

PT Transnovasi Bangun Persada mendukung industry 4.0 untuk public dan private sector. Transnovasi Berkembang dengan inovasi, Berkreasi dengan Dedikasi.

Transnovasi Bangun Persada

Job Descriptions

<ul>
	<li>Infrastructure: Merancang &amp; implementasi arsitektur cloud (multi-region, scalable, secure, cost-efficient).</li>
	<li>Kubernetes: Setup &amp; maintenance cluster, service mesh (Istio/Linkerd), upgrade &amp; patching.</li>
	<li>Bare Metal &amp; Data Center: Instalasi &amp; maintenance hardware, RAID, monitoring, lifecycle management, data center operations.</li>
	<li>Networking: Konfigurasi Mikrotik (routing, QoS), OPNsense (firewall, IDS/IPS, VPN), VLAN, load balancer, network troubleshooting.</li>
	<li>Database: Administrasi PostgreSQL (TimescaleDB, PostGIS), MongoDB (replica/shard), Redis (cluster/HA), backup &amp; DR.</li>
	<li>• Application Stack: Deploy &amp; optimasi Next.js (SSG/SSR/ISR), NestJS microservices, Socket io real-time apps, Go services.</li>
	<li>CI/CD &amp; Automation: Bangun pipeline, integrasi automated testing, secrets injection dengan Infisical, deployment strategi (blue-green, canary, rolling).</li>
	<li>Monitoring &amp; SRE: Implement observability stack, custom metrics, alerting, SLA/SLO, capacity planning.</li>
	<li>Security &amp; Compliance: Container/image scanning, secrets rotation &amp; audit logging, compliance reporting, disaster recovery testing.</li>
	<li>Leadership: Mentoring tim DevOps, code review, technical decision making, dokumentasi &amp; runbooks.</li>
	<li>Innovation: Evaluasi &amp; adopsi tools baru, standardisasi proses, POC teknologi terbaru.</li>
</ul>

Development, Security, Operation (DSO) Specialist

- Develop and implement IT Compliance policies, procedures and practices 
- Create and manage effective action plans in response to audit discoveries and compliance violations 
- Involved procurement process and manage licenses 
- Responsible for maintain security in the cloud and on-premise 
- Provide appropriate solutions in terms of selecting security used in terms of efficiency, reliability, security and other related aspects 
- Monitor and test security performance for possible bottlenecks, identify possible solutions, and work with developers to implement necessary fixes 
- Cooperate with vendors and other IT department personnel in working and solving problems 
- Able to perform crisis management and incident activity by remote or onsite 
- Involved Pcidss, Pci3ds, &amp; Iso27001 compliance

Kalibrr Job Search