About the job
About Us
At INDICO, a dynamic digital technology subsidiary of Telkomsel, we are at the forefront of transforming Indonesia's digital landscape. As a key player in the digital telecom sector, INDICO manages a diverse portfolio of vertical digital businesses, including Kuncie (edu-tech), Fita (health-tech), and Majamojo (gaming). Our vision is to broaden our horizons by exploring innovative opportunities across various sectors that complement Telkomsel's digital initiatives. We leverage our extensive digital assets and capabilities to drive a wave of innovations aimed at catalyzing Indonesia's digital economy.
We are committed to empowering individuals and businesses by embodying our core values encapsulated in the EPIC WAY: Excellence, Positivity, Impactful Collaboration, Customer First, Walk the Talk, Accountability, and a Yes-if Mindset.
Key Responsibilities:
- Monitor, analyze, and respond to security incidents across applications, Linux servers, and cloud environments.
- Design and implement security measures grounded in Secure-by-Design and Security-by-Default principles.
- Work collaboratively with developers to assess application architecture and security-related code.
- Support and engage in penetration testing (web, API, infrastructure), including validating findings and remediation efforts.
- Conduct basic threat modeling and risk assessments for both new and existing systems.
- Enhance security logging, monitoring, and alerting mechanisms using SIEM and endpoint security tools.
- Participate in incident response activities, including root cause analysis and post-incident evaluations.
- Create and uphold practical security guidelines and best practices for engineering teams.
- Effectively communicate security risks and remediation strategies to both technical and non-technical stakeholders.

