Senior Enterprise Security Engineer (SDE 3)

Kredivo Group; Jakarta Pusat; On-site; IDR 400,000,000 - 700,000,000; Full time

Job summary

Kredivo Group is seeking a Senior Security Engineer to lead daily Enterprise Security operations in Indonesia, with hands-on responsibility for endpoints, identity, SaaS, network, and cloud security. You will mentor junior engineers and guide security posture enhancements across Windows, macOS and Linux environments.

The role requires strong experience in EDR, vulnerability management, IAM, and cloud security, with a focus on zero trust and secure-by-default principles.

Qualifications

• 5+ years in cyberdefense security
• Hands-on experience with EDR, vulnerability & patch management, DLP, network security, phishing tools
• Strong IAM knowledge: SAML, OAuth/OIDC, SCIM
• Experience securing Google Workspace and directory services
• Experience with AWS and GCP
• Good scripting skills: Python, Bash or PowerShell
• Familiar with MITRE ATT&CK
• Mentoring engineers or leading small projects
• Good English communication skills

Responsibilities

• Lead day-to-day Enterprise Security work and roadmap
• Mentor and coach junior engineers, review configurations and remediation work
• Set risk-based priorities and report security posture metrics
• Write, maintain and enforce IT and Security policies and procedures
• Administer and tune security platforms (EDR, VMDR, WAF, Email Security Gateway)
• Execute end-to-end vulnerability management (scanning, prioritization, remediation, SLA) across Windows, macOS and Linux
• Automate patch/remediation via MDM tooling
• Design and review IAM controls including SSO, MFA and least privilege
• Apply zero trust in architecture decisions for knowledge workers and developers
• Support incident response with containment actions and phishing simulations
• Automate security operations and reporting with Python, Bash or PowerShell
• Evaluate security tools including AI-assisted options and support ISO 27001:2022 compliance

Skills

Hands-on security

Scripting

IAM security

Policy writing

English communication

Mentoring

Zero trust

Tools

EDR

VMDR

WAF

Email Security Gateway

MDM

Google Workspace

VPN

AWS

GCP

Job description

Kredivo Group is looking for a Senior Security Engineer to lead day‑to‑day Enterprise Security work. This is a hands‑on role. You will own the security of our endpoints, identity, SaaS, network and cloud, and you will guide junior security engineers on the team. You will deploy and run our security platforms, remediate vulnerabilities across the fleet, and harden our corporate environment using zero trust and secure‑by‑default principles. You will work with IT, DevOps and Engineering across Indonesia, and international, and support Cyber Defense during incidents.

About the Job:

Cyber Defense Strategy & Leadership

• Enterprise Security BAU work and projects, and help set the team's roadmap.
• Mentor and coach SDE-1 and SDE-2 engineers, and review their configurations, scripts and remediation work.
• Set priorities by risk, and track and report security posture metrics (patch compliance, EDR coverage, vulnerability SLA, phishing click rate) to the Enterprise Security Lead.
• Write, maintain and enforce IT and Security policies, standards and procedures.

Endpoint, Vulnerability & Patch Management

• Administer and tune the security platforms: EDR, VMDR, WAF and the Email Security Gateway.
• Run vulnerability management end to end: scanning, prioritization (CVSS, CISA KEV, Ransomware), remediation and SLA tracking across Windows, macOS and Linux.
• Build and safely deploy patch and remediation automation through MDM tools.
• Keep endpoint security agents deployed and healthy across the fleet.

Identity, SaaS & Cloud Hardening

• Work with IT and DevOps to harden Cloud Directory, Google Workspace, VPN and other SaaS tools.
• Design and review IAM controls: SSO (SAML, OAuth/OIDC), SCIM provisioning, MFA, conditional access, least privilege and access reviews.
• Apply zero trust and secure‑by‑default models in architecture decisions for knowledge workers and developers.
• Monitoring & Incident Support, Monitor internal and external systems for threats, triage alerts, and respond to them.
• Support Cyber Defense during incidents with containment actions such as isolation, account suspension and blocking.
• Run phishing simulations and security awareness programs, and measure the results.
• Advise employees on how to keep endpoints, office AV and network infrastructure secure.
• Automate security operations and reporting using Python, Bash or PowerShell.
• Evaluate new security tools, including AI-assisted tools, and support AI Security initiatives.
• Support ISO 27001:2022 and regulatory audits (e.g. OJK) by providing evidence, remediating gaps and maintaining controls.

About You:

• At least 5 years of cyberdefense security experience, preferably in a startup or fintech environment.
• Hands‑on experience deploying and managing EDR, vulnerability and patch management, DLP, network security and phishing simulation tools.
• Strong knowledge of identity and access management frameworks and protocols (SAML, OAuth/OIDC, SCIM).
• Experience securing Google Workspace, directory services, VPN and SaaS platforms.
• Experience with public cloud providers (AWS, GCP).
• Good scripting skills (Python, Bash or PowerShell).
• Knowledge of modern adversary tactics, techniques and procedures (MITRE ATT&CK).
• Experience mentoring engineers or leading small workstreams or projects.
• Good English communication skills.