Lead Cloud Security

INDODAX - Indonesia Digital Asset Exchange; Jakarta Selatan; On-site; IDR 420,000,000 - 640,000,000; Full time

Job summary

INDODAX - Indonesia Digital Asset Exchange is seeking a senior InfoSec professional with 5+ years in the field and 3+ years in cloud security. You will secure large-scale public cloud environments (AWS, GCP, BytePlus) and integrate security into CI/CD pipelines, using IaC tools like Terraform/CloudFormation.

Strong scripting and network security skills are essential. Proficiency in AWS IAM/KMS/GuardDuty/Security Hub/WAF, plus familiarity with container security tools and SIEMs, will be highly

Qualifications

• 5+ years in InfoSec or related field, incl. 3+ years in cloud security.
• Hands-on securing large-scale public cloud environments (AWS, GCP, BytePlus).
• Strong in at least one cloud provider (AWS/GCP) with IAM, KMS, GuardDuty, Security Hub, WAF.

Skills

Cloud security

Scripting (Python, Bash)

CI/CD security

Network security

Communication skills

Analytical thinking

Tools

Terraform

CloudFormation

Jenkins

GitLab CI

Azure DevOps

ELK

Splunk

Twistlock

Aqua

Job description

• 5+ years of experience in InfoSec or related field, incl. 3+ years in cloud security
• Hands‑on securing large‑scale public cloud (AWS, GCP, BytePlus)
• Strong in at least one cloud provider, such as:

1. AWS: IAM, KMS, GuardDuty, Security Hub, WAF

• Skilled in Infrastructure as Code (IaC) – Terraform / CloudFormation
• Proficient in scripting (Python, Bash, PowerShell)
• Experience integrating security in CI/CD pipelines (Jenkins, GitLab CI, Azure DevOps)
• Solid knowledge of network security (TCP/IP, firewalls, routing)
• Strong communication, problem‑solving, and analytical skills

Nice to Have:

• Familiarity with container security tools (Twistlock, Aqua)
• Experience with SIEM/log analysis (ELK, Splunk)
• Security certs (e.g., AWS Security Specialty, GCP Security Engineer, CCSP)