Cybersecurity Incident Responder Lead

About the Role
You are responsible for leading security incident investigations to their completion and driving the remediation and lessons learned to be implemented by the stakeholders. On the side, you will also lead important initiatives across the Cyber Defense team by utilizing your technical prowess and people skills. You will need very strong technical skills across the domains (incident response, cyber threat intelligence, security engineering, and others) to perform well in this role. However, you must also possess excellent people skills to be able to work with stakeholders well. You will need experience in cybersecurity before in order to thrive in this role.

What You Will Do

• Security incident: lead security incident investigations to their completion and drive the remediation and lesson learned. Provide updates to the stakeholders (in oral or written form).
• Security monitoring: advice on how to monitor security events and find security incidents from the data.
• Security improvement: lead the initiatives to improve the Cyber Defense and the broader Security team. It could take the form of performing automation and configuration/process/document audit, among others. Sometimes, you will be expected to support the initiatives of other teams.
• Stakeholder management: in order to be successful, CSIRT needs to maintain good relationships with many different stakeholders. You are expected to take part in this area.

What You Will Need

• Strong technical foundation and professional working experience in some of the multiple security domains: incident response, security monitoring, cloud security, security engineering, malware analysis, scripting/automation, and enterprise security.
• Strong familiarity working with security tools, such as email security tools, EDR (Endpoint Detection and Response) tool, network security tools, malware sandbox, digital forensics tools, reputable public cloud platforms, and CSPM (Cloud Security Posture Management).
• 5-7 Years of working experience (strong mid-level or senior in cyber security), relevant degree (bachelor or higher), or reputable industry certification (e.g.: ISC2, GIAC, Offsec, EC Council) preferred.
• Professional contributions (such as speaking experience, publications, a professional blog, or experience in developing open-source tools/scripts) are preferred.
• Possess critical thinking and problem-solving skills. Able to deliver outstanding results with minimal supervision.
• Leadership, experience in mentoring junior members, and stakeholder management skills are a must. You will be leading multiple important initiatives across the teams/companies.
• Proficiency in English and Indonesian, both in written and oral form.
• Outstanding reporting skills: content, delivery, clarity, brevity, and presentation.

About the Team
CSIRT (Computer Security Incident Response Team) supports GoTo missions by handling security incidents and driving the remediation and lessons learned to ensure similar incidents are prevented in the future. CSIRT analysts are independent and driven to achieve success. We work hard and play hard.
About GoTo GroupGoTo Group is the largest digital ecosystem in Indonesia with its mission to “Empower Progress’ by offering technological infrastructure and solutions for everyone to access and thrive in the digital economy. The GoTo ecosystem consists of on-demand transportation services, food and grocery delivery, logistics and fulfillment, as well as financial and payment services through the Gojek and GoTo Financial platforms.It is the first platform in Southeast Asia that hosts these crucial cases in a single ecosystem, capturing the majority of Indonesia’s vast consumer household.
About Gojek Gojek is Southeast Asia’s leading on-demand platform and pioneer of the multi-service ecosystem with over 2.5 million driver partners across the regions offering a wide range of services such as transportation, food delivery, logistics and more. With its mission to create impact at scale, Gojek is committed to resolving consumer problems and raising standards of living by connecting consumers to the best providers of goods and services in the market.
About GoTo FinancialGoTo Financial accelerates financial inclusion through its leading financial services and merchants solutions. Its consumer services include GoPay and GoPayLater and serve businesses of all sizes through Midtrans, Moka, GoBiz Plus, GoBiz, and Selly. With its trusted and inclusive ecosystem of products, GoTo Financial is open to new growth opportunities and aims to empower everyone to Make It Happen, Make It Together, Make It Last.
GoTo and its business units, including Gojek and GoToFinancial ("GoTo") only post job opportunities on our official channels on our respective company websites and on LinkedIn. GoTo is not liable for any job postings or job offers that did not originate from us. You should conduct your own due diligence to prevent being victims of any fake job scams, if they did not originate from GoTo's official recruitment channels.
#LI-GOTO#LI-Onsite