Senior Cloud Security Engineer: Kubernetes & CI/CD

Amartha Financial; Jakarta Pusat; On-site; IDR 300,000,000 - 540,000,000; Full time

Job summary

Amartha is hiring a Senior Security Engineer to own cloud and platform security. You will implement controls to prevent misconfiguration, respond to detections, and codify security infrastructure. You will collaborate with DevOps and platform teams to align with ISO 27001 and regulator requirements.

You will drive security tooling, runbooks, and incident response in a hands-on role, shaping technical direction while delivering real risk reductions across our cloud and container estate.

Qualifications

• 5+ years in security engineering, infra/SRE roles
• 3+ years in cloud and container security
• Hands-on depth in public cloud and Kubernetes security
• Production SIEM experience and alert triage
• IaC in practice with reusable modules and pipelines
• CI/CD security: infra-as-code scanning, policy as code
• Knowledge of cloud benchmark/hardening standards
• Scripting in Python/Go/Bash
• Strong documentation habit for runbooks
• Fluent Bahasa Indonesia and English

Responsibilities

• Own container and cloud runtime security, Kubernetes hardening, runtime threat detection
• Run and extend automated benchmark and configuration scanning across cloud and productivity tools
• Build shift-left security into CI/CD with IaC scanning and misconfiguration gates
• Bring cloud estate under infrastructure as code, reduce drift
• Develop deployment pipelines for security tooling to ship with product
• Own the SIEM platform end-to-end, policy, detection, and retention
• Respond to alerts, tune detections, reduce false positives
• Manage edge and perimeter security, WAF rules and DNS visibility
• Control access paths and platform security engineering continuity
• Document build details so others can operate independently
• Share on-call rotation and contribute to governance/controls evidence
• Produce control evidence for auditors with GRC team

Skills

Cloud security

Kubernetes security

SIEM

Infrastructure as code

CI/CD security

Policy as code

Python/Go/Bash

Documentation

Bahasa Indonesia & English

Tools

Google Cloud

Kubernetes

SIEM tools

CI/CD pipelines

IaC tooling

Job description

Amartha is hiring a Senior Security Engineer to own cloud and platform security. You will implement controls to prevent misconfiguration, respond to detections, and codify security infrastructure. You will collaborate with DevOps and platform teams to align with ISO 27001 and regulator requirements.

You will drive security tooling, runbooks, and incident response in a hands-on role, shaping technical direction while delivering real risk reductions across our cloud and container estate.