About the role
You will run and maintain our security platforms, remediate vulnerabilities across the fleet, and harden our infrastructure using zero trust and secure-by-default principles. You will work with IT, DevOps and Engineering across Indonesia and internationally, and report to the Enterprise Security Lead.
About the job:
Endpoint, Vulnerability & Patch Management
- Deploy, manage and maintain security platforms: EDR, VMDR, DLP, Cloudflare (Zero Trust/WAF) and the Email [name removed]. - Identify and remediate vulnerabilities in internal systems, and track remediation against SLA. - Deploy patches and remediation scripts through MDM/RMM tools. - Check that endpoint security agents are deployed and healthy across the fleet.
Identity, SaaS & Cloud Hardening
- Work with IT and DevOps to harden Cloud Directory, Google Workspace, VPN and other SaaS tools. - Set up and maintain SSO, SCIM provisioning, MFA and access controls. - Support security configuration reviews of AWS and GCP environments. - Apply zero trust and secure-by-default practices in day-to-day work.
Monitoring & Incident Support
- Monitor internal and external systems for security threats, and triage and respond to alerts. - Support Cyber Defense with containment actions during incidents.
Security Awareness & Policy
- Contribute to and enforce IT and Security policies and procedures. - Run phishing simulations and support security awareness programs. - Educate employees on data security, and advise them on securing endpoints, office AV and network infrastructure.
Automation & Audit
- Automate routine security tasks and reporting using Python, Bash or PowerShell. - Support ISO 27001:2022 and regulatory audits by providing evidence and remediating gaps.
About you:
- 3-4 years of blue-team security experience, preferably in a startup environment. - Experience deploying and managing endpoint security tools (EDR, vulnerability and patch management, network security, phishing simulation). - Experience with identity and access management protocols (SAML, OAuth, SCIM). - Experience with public cloud providers (AWS, GCP). - Scripting experience (Python, Bash or similar). - Knowledge of modern adversary tactics, techniques and procedures. - Experience working with cross-functional teams, especially engineering. - Good English communication skills.
Preferred
- Experience with ISO 27001:2022 or regulatory compliance audits. - Experience with MDM platforms (e.g. JumpCloud, Intune, Jamf). - Certifications such as Security+, CySA+, or vendor certifications (EDR, WAF, VMDR) are a plus.
How You Work
- Ownership: you manage and run BAU tasks on your own and support projects through to completion. - Risk-driven: you focus your effort where it reduces the most risk. - Collaboration: you work with empathy alongside colleagues in IT, DevOps and Engineering. - Communication: you explain security practices clearly to employees and teams. - Growth mindset: you keep learning and keep up with the threat landscape.
Text as published by Kredivo Group. We don't edit postings; apply and ask questions on the employer's site.