Security Operations Specialist

Glints; Batam; On-site; IDR 900,000,000 - 1,500,000,000; Full time

Job summary

Glints in Batam is seeking a Security Operations Principal Analyst to lead patching lifecycle across on-prem and cloud platforms, coordinating remediation and risk-based prioritization.

You will drive security automation, dashboards in Power BI, and IAM implementations, while guiding cross-functional teams and aligning with MAS TRM-like requirements. The role emphasizes strong analytics, process improvements, and secure AI adoption to strengthen overall security posture.

Qualifications

• Requires university degree in CS/Info Security or related field.
• 12+ years in technology with at least 8+ years in cybersecurity in regulated environments.
• Strong knowledge of vulnerability management, EOL remediation, patching, automation and AI security.
• Experience with cloud providers (Azure/AWS/GCP) and container tech (K8s).
• Proficient in scripting and dashboard tools (Power BI/Power Automate).

Responsibilities

• Oversee end-to-end security patching lifecycle for systems and platforms.
• Design, develop, and maintain security automation scripts and dashboards.
• Track and report security operations metrics and KPIs.
• Lead security initiatives and automation projects with stakeholders.
• Review security deviations and ensure regulatory alignment and mitigations.

Skills

Security operations

Vulnerability management

Automation & scripting

Data-driven decisions

Education

Bachelor's degree in Computer Science / Information Security

Tools

Azure

AWS

GCP

Kubernetes

Power BI

Power Automate

Python

Shell

Job description

Hiring for Security Operations Principal Analyst!

Location: Batam

Full-time

About the role:

The objective of this position is to manage and strengthen the security posture of various on-premises and cloud platforms by overseeing and automating security patching operations, ensuring the timely remediation of vulnerabilities, and mitigating end-of-life (EOL) software risks across all resources. This role is responsible for continuously improving patch management processes, collaborating with cross-functional teams, and maintaining a strong and resilient security posture across the organization.

In addition, this position is responsible for conducting security assessments, prioritizing remediation efforts, and performing deviation management analysis in alignment with threat intelligence, regulatory and compliance requirements, and business risk considerations. The role will also lead and deliver multiple security initiatives, including end-to-end security project management and the implementation of security automation capabilities across key domains, particularly security patching and Identity and Access Management (IAM). Furthermore, this position will drive the adoption and implementation of secure AI and automation technologies to enhance security operations, strengthen security controls, and improve overall operational efficiency.

Roles and Responsibilities:

1. Security Posture Management

• Manage the end-to-end security patching lifecycle for systems and platforms, ensuring the timely remediation of vulnerabilities and risks associated with end-of-life (EOL) software components.
• Collaborate with vulnerability management and infrastructure teams to assess, prioritize, and deploy security patches based on risk severity and business impact.
• Maintain and continuously improve security patch management processes and documentation, ensuring alignment with industry best practices, internal policies and procedures, and regulatory compliance requirements.

2. Security Automation (Scripting, Orchestration, and Dashboards)

• Design, develop, maintain, and enhance security automation scripts and workflows to streamline and optimize security patching processes.
• Develop, maintain, and enhance reporting dashboards using JIRA, Power BI, and other relevant technology platforms to improve visibility into security operations and performance.
• Ensure that automation solutions are scalable, maintainable, and aligned with security policies, standards, and operational requirements.

3. Security Operations Metrics and Reporting

• Track, maintain, and report security operations metrics to monitor performance, operational effectiveness, and progress toward security objectives.
• Automate the collection, analysis, and presentation of security operations metrics wherever possible to improve efficiency and accuracy.
• Contribute to the preparation of security reports, management presentations, and reporting decks to communicate key metrics, findings, and operational updates to relevant stakeholders.

4. Security Operations Initiatives

• Support the delivery of various security operations projects and initiatives to strengthen the organization's overall security posture.
• Contribute to security operations automation projects by proposing improvement ideas, providing technical input, and delivering assigned project outcomes.
• Collaborate with relevant stakeholders to identify opportunities for process optimization and the implementation of security automation solutions.

5. Security Deviation Management

• Review and assess security deviation and exception requests submitted by application teams, infrastructure teams, and other stakeholders, ensuring that requests are complete, properly justified, and aligned with the organization's risk appetite and regulatory requirements.
• Evaluate proposed deviations against relevant attack path analyses, regulatory requirements, and security standards to identify potential security risks and determine appropriate mitigation controls.
• Document assessment findings, risk evaluations, and recommended mitigation measures to support informed decision-making and ensure appropriate risk management.

Requirements

Education

• A university degree in Computer Science, Computer Engineering, Information Security, Information Systems, or a related discipline.

Experience and Skills

• At least 12 years of experience in the technology field, including a minimum of 8 years of experience in cybersecurity within a regulated environment, such as banking, insurance, or fintech.
• Strong knowledge of cybersecurity vulnerability management, end-of-life (EOL) remediation, security patching processes and tools, security automation, cyber monitoring, and AI security.
• Knowledge of source code management systems and cloud environments, such as Microsoft Azure, AWS, and GCP, with an understanding of container technologies, Kubernetes (K8s), and microservices-based architectures.
• Hands-on experience with scripting languages, such as Python, Shell, or other relevant languages, as well as dashboard visualization and API integration using Power BI, Power Automate, or similar tools.
• Experience working in development, DevOps, or Site Reliability Engineering (SRE) roles is an added advantage.
• Strong analytical and problem-solving skills, with the ability to drive the resolution of complex security issues using a data-driven approach.
• Proven experience implementing cybersecurity tools and documenting related processes, procedures, and controls.
• Familiarity with the Monetary Authority of Singapore (MAS) Technology Risk Management (TRM) Guidelines or similar regulatory and compliance requirements.
• Excellent interpersonal and communication skills, with the ability to clearly explain the rationale, requirements, and implementation approach for security remediation. This includes effectively communicating associated risks, severity levels, and potential business impacts to relevant stakeholders.

Certifications and Licenses

• Preference will be given to candidates holding one or more of the following information security certifications or equivalent qualifications: GSOC, CSA, ECSA, CISSP, or CEH.