As the Security Engineer at Allofresh, you will be responsible for building and implementing a robust security framework to protect our infrastructure, data, and systems. You will work closely with cross-functional teams, including IT, Product, and Development, to design security strategies, conduct risk assessments, and ensure compliance with industry standards. This is a unique opportunity to shape the security landscape of a company and establish a security-first culture. Key Responsibilities:
Security Framework Development: Design and implement a comprehensive security strategy for Allofresh, including policies, procedures, and guidelines.
Infrastructure Security: Ensure the security of the company's infrastructure (cloud and on-premises) by managing firewall configurations, VPNs, network segmentation, and intrusion detection systems.
Threat Monitoring & Response: Develop and maintain monitoring and alert systems to identify and respond to security incidents promptly.
Risk Assessment & Mitigation: Conduct regular vulnerability assessments, penetration testing, and risk assessments on critical systems. Recommend and implement mitigation strategies.
Data Security & Compliance: Ensure data security and privacy across all platforms, implementing encryption protocols and adhering to regulatory requirements.
Identity & Access Management (IAM): Establish and maintain robust IAM policies, ensuring appropriate access control to sensitive systems and data.
Security Awareness Training: Lead security awareness training programs for employees to promote a culture of security across the organization.
Incident Response: Develop and maintain the company’s incident response plan. Coordinate and respond to security incidents, conducting root cause analysis and implementing preventive measures.
Collaboration & Consultation: Serve as a security advisor to development, operations, and product teams, ensuring that security is embedded in the lifecycle of new projects and features.
Educational Background: Bachelor’s degree in Computer Science, Information Security, or a related field.
Experience: Minimum of 3-5 years of experience in security engineering, with a strong track record of building security frameworks.
Technical Expertise:
Proficiency in cloud security (e.g., AWS, GCP, Azure) and securing cloud-based architectures.
Strong knowledge of networking, firewalls, VPNs, IDS/IPS, SIEM, and other security tools.
Hands-on experience with security assessment tools like Nessus, Burp Suite, Metasploit, etc.
Familiarity with security standards and frameworks (e.g., ISO 27001, NIST, OWASP).
Problem Solving: Strong analytical and problem-solving skills with the ability to communicate complex technical concepts to non-technical stakeholders.
Certifications (if any): CEH, CISSP, CISM, or similar credentials.
Language: Proficient in English and Bahasa Indonesia.
"Pihak Hired Today.com dan Perusahaan tidak akan meminta biaya dalam bentuk apapun pada saat melakukan proses recruitment. Mohon segera melaporkan kepada kami, apabila Anda jika pada saat diundang untuk interview dan diminta untuk melakukan pembayaran dengan sejumlah uang." "Hired Today.com and the Company will not ask for any form of payment during the recruitment process. Please report to us immediately, if you are invited for an interview and asked to make a payment with a sum of money."