Senior Enterprise Security Engineer

Kredivo Group; Jakarta Pusat; On-site; IDR 500,000,000 - 800,000,000; Full time

Job summary

Kredivo Group is seeking a Senior Security Engineer to lead day-to-day Enterprise Security work. This is a hands-on role responsible for the security of endpoints, identity, SaaS, network and cloud, and guiding junior security engineers on the team.

You will deploy security platforms, remediate vulnerabilities across the fleet, harden our corporate environment using zero trust and secure-by-default principles, and collaborate with IT, DevOps and Engineering across Indonesia and beyond.

Qualifications

• 5+ years in cyberdefense security, startup or fintech preferred.
• Hands-on experience with EDR, vulnerability and patch management.
• Strong IAM knowledge: SAML, OAuth/OIDC, SCIM.
• Experience with Google Workspace, VPN and SaaS security.
• Proficient scripting: Python, Bash or PowerShell.
• Good English communication skills.

Responsibilities

• Lead day-to-day enterprise security operations.
• Own endpoints, identity, SaaS, network and cloud security.
• Mentor SDE-1/SDE-2 engineers and review configurations/remediation work.
• Deploy and run security platforms; remediate vulnerabilities fleet-wide.
• Support Cyber Defense during incidents and run phishing simulations.

Skills

Cyber defense

Incident response

Scripting (Python)

IAM controls

Cloud security

Mentoring engineers

Threat monitoring

Zero trust

Tools

EDR platforms

VMDR

WAF

Email Security Gateway

MDM tools

Google Workspace

AWS

GCP

Python

Bash

PowerShell

Job description

Kredivo Group is looking for a Senior Security Engineer to lead day‑to‑day Enterprise Security work. This is a hands‑on role. You will own the security of our endpoints, identity, SaaS, network and cloud, and you will guide junior security engineers on the team. You will deploy and run our security platforms, remediate vulnerabilities across the fleet, and harden our corporate environment using zero trust and secure‑by‑default principles. You will work with IT, DevOps and Engineering across Indonesia, and international, and support Cyber Defense during incidents.

About the Job:

Cyber Defense Strategy & Leadership

• Enterprise Security BAU work and projects, and help set the team's roadmap.
• Mentor and coach SDE-1 and SDE-2 engineers, and review their configurations, scripts and remediation work.
• Set priorities by risk, and track and report security posture metrics (patch compliance, EDR coverage, vulnerability SLA, phishing click rate) to the Enterprise Security Lead.
• Write, maintain and enforce IT and Security policies, standards and procedures.

Endpoint, Vulnerability & Patch Management

• Administer and tune the security platforms: EDR, VMDR, WAF and the Email Security Gateway.
• Run vulnerability management end to end: scanning, prioritization (CVSS, CISA KEV, Ransomware), remediation and SLA tracking across Windows, macOS and Linux.
• Build and safely deploy patch and remediation automation through MDM tools.
• Keep endpoint security agents deployed and healthy across the fleet.

Identity, SaaS & Cloud Hardening

• Work with IT and DevOps to harden Cloud Directory, Google Workspace, VPN and other SaaS tools.
• Design and review IAM controls: SSO (SAML, OAuth/OIDC), SCIM provisioning, MFA, conditional access, least privilege and access reviews.
• Apply zero trust and secure‑by‑default models in architecture decisions for knowledge workers and developers.
• Monitoring & Incident Support, Monitor internal and external systems for threats, triage alerts, and respond to them.
• Support Cyber Defense during incidents with containment actions such as isolation, account suspension and blocking.
• Run phishing simulations and security awareness programs, and measure the results.
• Advise employees on how to keep endpoints, office AV and network infrastructure secure.
• Automate security operations and reporting using Python, Bash or PowerShell.
• Evaluate new security tools, including AI-assisted tools, and support AI Security initiatives.
• Support ISO 27001:2022 and regulatory audits (e.g. OJK) by providing evidence, remediating gaps and maintaining controls.

About You:

• At least 5 years of cyberdefense security experience, preferably in a startup or fintech environment.
• Hands‑on experience deploying and managing EDR, vulnerability and patch management, DLP, network security and phishing simulation tools.
• Strong knowledge of identity and access management frameworks and protocols (SAML, OAuth/OIDC, SCIM).
• Experience securing Google Workspace, directory services, VPN and SaaS platforms.
• Experience with public cloud providers (AWS, GCP).
• Good scripting skills (Python, Bash or PowerShell).
• Knowledge of modern adversary tactics, techniques and procedures (MITRE ATT&CK).
• Experience mentoring engineers or leading small workstreams or projects.
• Good English communication skills.