Senior Cloud & Platform Security Engineer

Amartha; Jakarta Selatan; Vor Ort; IDR 480.000.000 - 840.000.000; Vollzeit

Zusammenfassung

Amartha, a fintech platform, is seeking a Senior Security Engineer to own cloud and platform security engineering. You will implement controls across cloud and container environments, turn manual security infrastructure into code, and collaborate with DevOps and platform teams to meet ISO 27001 and regulator audit requirements.

This hands-on IC role sets the technical direction for cloud security, shaping threat detection, automation, and secure deployment practices across our production stack.

Qualifikationen

• 5+ years in security engineering, infra engineering or SRE with 3+ years in cloud/container security.
• Hands-on depth in public cloud and Kubernetes security: IAM, RBAC, network policy, runtime detection, secret management.
• Production experience with a SIEM: deployment, alert triage, detection rules.
• IaC in practice: reusable modules, state management, deployment pipelines.
• Experience embedding security scanning into CI/CD (IaC scanning, static analysis, container image scanning).
• Fluent Bahasa Indonesia and English in written and spoken form.

Aufgaben

• Own container and cloud runtime security, including Kubernetes hardening and runtime threat detection.
• Run and extend automated benchmark/ configuration scanning across cloud platform and apps.
• Build shift-left security into CI/CD with IaC scanning and misconfiguration gates.
• Bring security tooling under infrastructure as code and reduce drift.
• Develop and run deployment pipelines for security tooling to ship with product.
• Manage the SIEM platform end-to-end: isolation, versioning, config management, detection.
• Respond to alerts, tune detection rules, reduce false positives.
• Manage edge and perimeter security, including WAF rules and DNS visibility.
• Document builds so others can operate them; participate in security on-call rotation.
• Provide auditors/regulators with required control evidence in collaboration with GRC.

Kenntnisse

Security engineering

Cloud security

Kubernetes security

SRE practices

Scripting (Python/Go/Bash)

Documentation

Tools

Google Cloud Platform

Kubernetes

SIEM

Infrastructure as Code

CI/CD tooling

Jobbeschreibung

Amartha, a fintech platform, is seeking a Senior Security Engineer to own cloud and platform security engineering. You will implement controls across cloud and container environments, turn manual security infrastructure into code, and collaborate with DevOps and platform teams to meet ISO 27001 and regulator audit requirements.

This hands-on IC role sets the technical direction for cloud security, shaping threat detection, automation, and secure deployment practices across our production stack.