Cloud Security Engineer - DevSecOps & IaC Expert

Luminare Consulting; Daerah Khusus Ibukota Jakarta; On-site; IDR 223,200,000 - 334,800,000; Full time

Job summary

A consulting firm in Jakarta is seeking a skilled Cloud Security Engineer with hands-on experience securing cloud infrastructure. Responsibilities include building secure environments, automating security tasks, and managing security policies. The ideal candidate should be familiar with GCP, AWS, Terraform, and have strong scripting skills. Experience in container security and vulnerability remediation is essential. Join a dynamic team dedicated to ensuring the integrity and confidentiality of cloud systems.

Qualifications

• Hands-on experience with cloud platforms: GCP, AWS, and/or Azure.
• Strong skills in Infrastructure as Code (Terraform preferred).
• Experience writing scripts for security automation (Python, Bash, etc.).
• Good understanding of DevSecOps principles and CI/CD integration.
• Familiarity with microservices architecture and container security (Docker, Kubernetes).
• Experience remediating cloud vulnerabilities and applying security patches.

Responsibilities

• Build and manage secure cloud infrastructure using IaC (Terraform) on GCP, AWS, or Azure.
• Write scripts to automate security tasks in the DevSecOps process.
• Implement and manage cloud security policies using policy-as-code tools.
• Investigate and remediate cloud security findings or vulnerabilities.
• Ensure security best practices in microservices and containerized environments.
• Use tools to monitor and secure cloud environments.
• Work closely with other teams to fix security issues and improve cloud security.

Skills

cloud platforms (GCP, AWS, Azure)

Infrastructure as Code (Terraform)

scripting for security automation (Python, Bash)

DevSecOps principles

microservices architecture

problem-solving skills

Tools

Terraform

CSPM

CNAPP

CWPP

DSPM

SSPM

Job description

We are looking for a skilled Cloud Security Engineer to join our client's company. The ideal candidate will have hands-on experience in securing cloud infrastructure, implementing security automation, and remediating vulnerabilities in a dynamic cloud-native environment. You will be responsible for embedding security practices into our DevSecOps pipeline and ensuring the integrity, confidentiality, and availability of our systems.

Key Responsibilites

• Build and manage secure cloud infrastructure using IaC (Terraform) on GCP, AWS, or Azure
• Write scripts to automate security tasks in the DevSecOps process
• Implement and manage cloud security policies using policy-as-code tools
• Investigate and remediate cloud security findings or vulnerabilities
• Ensure security best practices in microservices and containerized environments
• Use tools like CSPM, CNAPP, CWPP, DSPM, and SSPM to monitor and secure cloud environments
• Work closely with other teams to fix security issues and improve overall cloud security
  

Requirements:

• Hands-on experience with cloud platforms: GCP, AWS, and/or Azure
• Strong skills in Infrastructure as Code (Terraform preferred)
• Experience writing scripts for security automation (Python, Bash, etc.)
• Good understanding of DevSecOps principles and CI/CD integration
• Familiarity with microservices architecture and container security (e.g., Docker, Kubernetes)
• Experience remediating cloud vulnerabilities and applying security patches
• Strong analytical and problem-solving skills