Enterprise Security Specialist

About the Role

Enterprise Security Specialist will be primarily responsible to ensure that Superbank’s enterprise security is maintained at all times. You will be responsible for managing the Endpoint Protection platform, Vulnerability Management platform, Identity Management platform and several other security platforms & tools( e.g. Data Leakage Protection platform), build standards and guidelines for Superbank IT, come up security policies aligning with Superbank business needs and to ensure that Superbank assets are configured in a secure manner.

Work Responsibilities

• Working hand in hand with Superbank IT to ensure that security controls are designed and implemented in various IT processes such as endpoint security and OS hardening, advising security configurations for tools/ platforms that are managed by the IT team such as video conferencing, asset management etc.
• Responsible for an enterprise-wide endpoint protection program and vulnerability management program to ensure that Superbank’s IT assets are free from known vulnerabilities
• Reviewing & proposing policy changes on various security technologies in Superbank.
• Responsible for Endpoint security (Anti malware, XDR, EDR), as well as other endpoint security tools.
• Involved in the roll out and maintenance of the enterprise-wide Data Leakage Protection (DLP) tool. You will work closely with the Incident response team to triage and act on the possible data leakage incidents alerted by the DLP tool.

Job Requirements

• Bachelor’s degree in Computing, Information Technology or equivalent from a recognized university
• Having a minimum of 5 years working experience in enterprise security-related roles. 
• Able to follow the existing vulnerability reporting standard and suggest the improvements over some time
• Experience in working in multiple projects simultaneously
• Able to set up and execute a POC (Proof-of-Concept) for new technology/ tools
• Familiar with packet inspection tools; wireshark, tcpdump , hping, etc.
• Have at least 5 years of experience in handling at least 3-4 of these:
  - Network security (Firewall, IPS, SWG/Proxy)
  - Data leak prevention
  - Endpoint security (Anti malware, XDR, EDR)
  - Vulnerability management
  - SIEM
• Have a good understanding on Cloud Technologies and Cloud Security
• Have a good understanding of security principles like defense in depth, least privileges; processes such as vulnerability & patch management
• Not mandatory but having programming or scripting experience (linux, windows, mac) will be an advantage
• Able to communicate effectively and professionally in Indonesian and English language
• Not mandatory but having security/vendor-specific certifications will be an advantage

Leadership Competency

Individual Contributor