Security Researcher
PT ITSEC Asia Tbk
Fewer Applicants- Full-Time
- On-site • Jakarta
- Negotiable
Job Description
- Study adversary Tactics, Techniques, and Procedures (TTPs) using frameworks such as MITRE ATT&CK to understand modern attacker behavior and threat vectors.
- Perform in-depth analysis of real-world cyberattacks, including malware, exploits, phishing, and lateral movement techniques to understand how they bypass existing defenses.
- Develop actionable threat intelligence artifacts such as updated Indicator of Compromise (IoC), behavioral patterns, and detection signatures for internal use or product integration.
- Continuously update and enrich internal threat intelligence databases to ensure that security engineering and product teams have access to relevant, high-fidelity data.
- Explore and prototype AI/ML-driven security approaches, such as anomaly detection models, behavior-based classification, or automated alert triaging, for possible feature integration.
- Work closely with the Security Researcher Lead to align individual projects with strategic priorities and support product-focused research output.
- Participate in security product grooming discussions, offering a technical perspective on feasibility, attack surface, or mitigation strategies.
Requirements
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or related field.
- 3-5 years of experience in security research, threat intelligence, or a similar role.
- Deep understanding of Tactics, Techniques, and Procedures (TTPs) frameworks such as MITRE ATT&CK, advanced threat hunting, and adversary techniques.
- Strong knowledge of detection signatures, advanced attack techniques, and modern threat landscapes.
- Strong familiarity with Snort/Suricata rules and modern detection engineering approaches.
- Proficiency in scripting languages (Python, Bash) to build test cases and validate product integrations.
- Experience working with Linux systems and a solid understanding of networking fundamentals.
- Proactive mindset and ability to prioritize and manage multiple projects.
- Excellent communication skills to convey technical findings effectively.
- Ability to mentor junior researchers.
Tips Menjaga Diri
Perusahaan dan Lowongan di Dealls tidak meminta data pribadi, informasi rekening, atau pungutan ketika melamar. Hindari juga lowongan Google Form / Grup Telegram tanpa keabsahan yang jelas.
ITSEC is one of the leading cybersecurity companies in the APAC region, listed on the Indonesian Stock Exchange (IDX), with over 300 employees across five countries. We deliver end-to-end cybersecurity services and solutions, including Consulting Services, Security Solutions Integration, and Managed Security Services. ITSEC provides continuous IT infrastructure protection against multiplying cybersecurity threats and ensures compliance with increasingly demanding data protection and critical infrastructure regulations. Our expertise has been built over a decade of delivering thousands of high-quality cybersecurity projects, providing cutting-edge solutions in collaboration with world-class technology partners across financial, telecommunications, energy, transportation, manufacturing, and other critical industry sectors. We also have extensive experience in helping our customers with fraud prevention, Operational Technology (OT), and Industrial IoT (IIoT) security.
