Enterprise Security Engineer (SDE 2)

Kredivo Group; Jakarta Pusat; Sur place; IDR 180 000 000 - 360 000 000; Plein temps

Résumé du poste

Kredivo Group in Jakarta is seeking a security-focused professional to oversee endpoint, vulnerability and patch management across our Indonesia and international teams. You will deploy, monitor, and improve security platforms, and work closely with IT, DevOps and Engineering.

You will implement zero-trust and secure-by-default practices, conduct phishing simulations, and support ISO 27001:2022 audits while educating staff on data security and best practices.

Qualifications

• 3-4 years of blue-team security experience in a startup or similar environment.
• Experience deploying and managing endpoint security tools (EDR, vulnerability and patch management).
• Familiarity with IAM protocols (SAML, OAuth, SCIM) and cloud security in AWS/GCP.
• Proficient scripting in Python or Bash for automation.

Responsabilités

• Deploy, manage and maintain security platforms including EDR, VMDR, DLP, Cloudflare Zero Trust and Email Security Gateway.
• Identify and remediate vulnerabilities across internal systems and track remediation against SLA.
• Patch management via MDM/RMM tools and ensure endpoint agents are healthy.
• Harden Cloud Directory, Google Workspace, VPN and SaaS tools; manage SSO, SCIM provisioning and MFA.
• Monitor security threats, triage alerts, and support cyber defense during incidents.
• Educate and enforce IT and Security policies; run phishing simulations and awareness.
• Automate routine tasks and reporting using Python, Bash or PowerShell; support ISO 27001:2022 audits.

Connaissances

Blue-team security

Endpoint security

IAM protocols

Cloud security (AWS GCP)

Scripting (Python Bash)

Threat modeling & incident response

Cross-functional collaboration

Outils

EDR

VMDR

Cloudflare Zero Trust

Email Security Gateway

MDM/RMM tools

Description du poste

You will run and maintain our security platforms, remediate vulnerabilities across the fleet, and harden our infrastructure using zero trust and secure-by-default principles. You will work with IT, DevOps and Engineering across Indonesia and internationally, and report to the Enterprise Security Lead.

About the job:

Endpoint, Vulnerability & Patch Management

• Deploy, manage and maintain security platforms: EDR, VMDR, DLP, Cloudflare (Zero Trust/WAF) and the Email Security Gateway.
• Identify and remediate vulnerabilities in internal systems, and track remediation against SLA.
• Deploy patches and remediation scripts through MDM/RMM tools.
• Check that endpoint security agents are deployed and healthy across the fleet.
• Work with IT and DevOps to harden Cloud Directory, Google Workspace, VPN and other SaaS tools.
• Set up and maintain SSO, SCIM provisioning, MFA and access controls.
• Support security configuration reviews of AWS and GCP environments.
• Apply zero trust and secure-by-default practices in day-to-day work.
• Monitor internal and external systems for security threats, and triage and respond to alerts.
• Support Cyber Defense with containment actions during incidents.

Security Awareness & Policy

• Contribute to and enforce IT and Security policies and procedures.
• Run phishing simulations and support security awareness programs.
• Educate employees on data security, and advise them on securing endpoints, office AV and network infrastructure.

Automation & Audit

• Automate routine security tasks and reporting using Python, Bash or PowerShell.
• Support ISO 27001:2022 and regulatory audits by providing evidence and remediating gaps.

About you:

• 3-4 years of blue-team security experience, preferably in a startup environment.
• Experience deploying and managing endpoint security tools (EDR, vulnerability and patch management, network security, phishing simulation).
• Experience with identity and access management protocols (SAML, OAuth, SCIM).
• Experience with public cloud providers (AWS, GCP).
• Scripting experience (Python, Bash or similar).
• Knowledge of modern adversary tactics, techniques and procedures.
• Experience working with cross-functional teams, especially engineering.

Preferred

• Experience with ISO 27001:2022 or regulatory compliance audits.
• Experience with MDM platforms (e.g. JumpCloud, Intune, Jamf).
• Certifications such as Security+, CySA+, or vendor certifications (EDR, WAF, VMDR) are a plus.

How You Work

• Ownership: you manage and run BAU tasks on your own and support projects through to completion.
• Risk-driven: you focus your effort where it reduces the most risk.
• Collaboration: you work with empathy alongside colleagues in IT, DevOps and Engineering.
• Communication: you explain security practices clearly to employees and teams.
• Growth mindset: you keep learning and keep up with the threat landscape.