Principal Analyst, Security Operations

Glints; Indonesia; On-site; IDR 400,000,000 - 800,000,000; Full time

Job summary

Glints is seeking a Principal Analyst – Security Operations to strengthen security posture across on-premises and cloud environments. This hands-on role focuses on vulnerability remediation, patch management, EOL risk, and security automation.

The ideal candidate will actively implement and operate security controls, drive process improvements, and collaborate with infrastructure, application, and security teams to address complex risks and ensure regulatory alignment.

Qualifications

• Requires a university degree in Computer Science, Computer Engineering, Information Security, Information Systems, or related field.
• 7–15 years of hands-on cybersecurity experience, preferably in regulated industries.
• Strong vulnerability management, patching, and EOL remediation experience.
• Scripting/automation skills in Python, Shell, or PowerShell.
• Experience with cloud environments such as Azure, AWS, or GCP; containers and Kubernetes.
• Ability to communicate security findings to both technical and non-technical stakeholders.

Responsibilities

• Manage end-to-end security patching lifecycle and EOL risk across systems.
• Assess and prioritize vulnerabilities based on threat intel, severity, business impact.
• Develop and maintain security automation scripts and workflows.
• Improve security dashboards and reporting using Jira, Power BI, Power Automate, and API integrations.
• Track and automate security operations metrics and performance.
• Review deviation requests, assess risks, and recommend mitigations.
• Support security initiatives involving automation, patching, and IAM.
• Collaborate with infrastructure, application, and information security teams to resolve complex issues and remediation requirements.
• Ensure security processes and documentation align with standards and regulatory requirements.

Skills

Vulnerability management

Security operations

Hands-on implementation

Analytical thinking

Communication skills

Education

Bachelor's degree in Computer Science or related field

Tools

Python

Shell

PowerShell

JIRA

Power BI

API integrations

Kubernetes

Job description

About the Role

We are looking for an experienced Principal Analyst – Security Operations to strengthen security posture across on-premises and cloud environments. This role focuses on vulnerability remediation, security patch management, end-of-life (EOL) risk management, and security automation.

The ideal candidate is a hands-on cybersecurity professional who remains actively involved in technical implementation and operations, drives process improvements, and collaborates with infrastructure, application, and security teams to address complex security risks.

What You'll Do

• Manage the end-to-end security patching lifecycle, ensuring timely remediation of vulnerabilities and EOL software risks across systems and platforms.
• Assess and prioritize security vulnerabilities based on threat intelligence, severity, business impact, and regulatory requirements.
• Develop, maintain, and enhance security automation scripts and workflows using Python, Shell, PowerShell, or other scripting languages.
• Improve security operations dashboards and reporting using JIRA, Power BI, Power Automate, and API integrations.
• Track and automate security operations metrics, reporting, and performance monitoring.
• Review security deviation and exception requests, assess associated risks, and recommend appropriate mitigation controls.
• Support security operations initiatives involving automation, security patching, and Identity and Access Management (IAM).
• Collaborate with infrastructure, application, and information security teams to resolve complex security issues and communicate remediation requirements effectively.
• Ensure security processes and documentation align with internal security standards and applicable regulatory requirements.

Must-Have Requirements

• A university degree in Computer Science, Computer Engineering, Information Security, Information Systems, or a related field.
• 7–15 years of relevant technical experience, including substantial hands-on cybersecurity experience, ideally within a regulated industry such as banking, insurance, or fintech.
• Strong hands-on experience in vulnerability management, security patching, EOL remediation, and security operations.
• Practical scripting and automation experience using Python, Shell, PowerShell, or similar languages.
• Experience with cloud environments such as Azure, AWS, or GCP, with an understanding of containers, Kubernetes, and microservices architecture.
• Experience implementing security tools, improving operational processes, and maintaining technical documentation.
• Strong analytical and problem-solving skills, with the ability to assess security risks and prioritize remediation based on data and business impact.
• Good communication skills, with the ability to explain security findings, remediation requirements, severity, and potential business risks to technical and non-technical stakeholders.
• A strong willingness and ability to remain actively involved in hands-on technical implementation and operations, rather than focusing primarily on people management or strategic oversight.

Nice to Have

• Experience with Power BI, Power Automate, JIRA, dashboard visualization, and API integration.
• Previous experience as a developer, DevOps Engineer, or Site Reliability Engineer (SRE).
• Familiarity with MAS Technology Risk Management (TRM) guidelines or similar regulatory frameworks.
• Relevant certifications such as CISSP, CEH, ECSA, CSA, GSOC, or equivalent qualifications.

What We Offer

• Opportunities to contribute to enterprise-level cybersecurity and security operations initiatives.
• Exposure to complex security environments across on-premises and cloud platforms.
• Opportunities to improve security automation, vulnerability remediation, and operational processes.
• Full-time employment under a one-year contract, renewable based on performance.
• Overtime compensation through time off in lieu, subject to applicable terms and conditions.