Penetration Tester

Company Description

Kasir Pintar is a comprehensive point-of-sale (POS) solution designed primarily for small and medium-sized enterprises (SMEs) in Indonesia. This innovative platform offers an array of features that enable business owners to manage their operations more efficiently. With Kasir Pintar, users can handle transactions, track inventory, manage customer data, and generate detailed reports, all through a user-friendly interface.

The service aims to simplify the day-to-day administrative tasks of running a business by integrating essential functions into one accessible system. It helps businesses digitalize their processes, leading to better record-keeping, increased accuracy in transactions, and improved overall business intelligence. This makes Kasir Pintar an invaluable tool for Indonesian SMEs looking to streamline operations and boost productivity.

Placement : Surabaya, East Java

Role Description

This is a full-time hybrid role for a Security Engineer / Penetration Tester at PT Kasir Pintar Internasional in Surabaya, with flexibility for some remote work. The Security Engineer will be responsible for ensuring the security of our applications, networks, and systems. The role involves designing, implementing, and maintaining security measures to protect the organization's data and infrastructure.

What You'll Do:

1. Security Assessment: Conduct thorough evaluations and testing on applications, server architectures, and network configurations to identify potential security vulnerabilities.
2. Access Management: Manage user identities and access rights to ensure that only authorized personnel have access to critical applications, servers, and databases.
3. Policy Development: Document and establish robust corporate data security policies.
4. Incident Response: Take decisive actions to halt attacks and restore systems to secure states in the event of security breaches.
5. Monitoring and Detection: Configure and monitor network traffic and security logs to spot suspicious activities.

What We Need From You:

• A Bachelor’s degree in Computer Science, Computer Engineering, or Information Security.
• A strong understanding of network security concepts, including firewalls, VPNs, IDS/IPS, and DDoS attack mitigation.
• Proficiency in application security testing, vulnerability identification, and remediation.
• Familiarity with identity management, role-based access control, and authentication processes.
• Knowledge of cloud computing security and best practices for data protection in cloud environments.
• Ability to investigate security incidents and manage them swiftly and effectively.