Senior Security Engineer

Glints; Batam; On-site; IDR 167,400,000 - 334,800,000; Full time

Job summary

Glints in Batam is seeking an experienced security professional to own the patching lifecycle, collaborate with infra and security teams, and enhance automation for remediation. The role emphasizes risk-based patch prioritization, metrics-driven reporting, and adherence to policies and regulatory requirements.

You will design automation workflows, maintain documentation, and lead security operations initiatives while contributing to a data-driven remediation culture.

Qualifications

• 5+ years of technology experience in cybersecurity.
• Experience with vulnerability management, EOL remediation, and automation.
• Familiar with cloud environments (Azure, AWS, GCP), containers/K8s, microservices.
• Scripting in Python or shell; API integration with dashboards (Power BI).
• Knowledge of MAS TRM or similar regulatory requirements.

Responsibilities

• Manage end-to-end security patching lifecycle for systems and platforms.
• Collaborate with vulnerability management and infra teams on patch deployment.
• Maintain patch management processes and documentation for compliance.
• Design and maintain security automation scripts and workflows.
• Track metrics and automate data gathering, analysis, and reporting.
• Prepare security reports and decks; support security operations projects.
• Involve in automation projects and contribute ideas and deliverables.
• Review deviations and exceptions for alignment with risk appetite and regs.
• Evaluate deviations against attack paths and regulatory requirements.

Job description

Key Responsibilities:

• Manage end-to-end security patching lifecycle for systems and platforms, ensuring timely remediation of vulnerabilities and endof-life (EOL) software components.


• Collaborate with vulnerability management and infrastructure teams to assess, prioritize, and deploy patches based on risk and business impact.


• Maintain and enhance security patch management processes and documentation, ensuring alignment with best practices, policies & procedures, and compliance requirements.


• Design, develop, and maintain/enhance security automation scripts and workflows to streamline security patching processes.


• Track and populate security operations metrics. Automate as much as possible the process of gathering, analyzing, and presenting the security operations metrics.


• To involve in the preparation of various security reports and decks.


• Support the team in various security operations projects and initiatives.


• Involve in security operations automation project and provide contribution, ideas, and deliverables.


• Review and assess security deviation and exception requests proposed by application teams, infrastructure teams, and other stakeholders, ensuring completeness, justification, and alignment with the risk appetite & regulatory requirements.


• Evaluate deviations against relevant attack path analysis, regulatory requirements, and security standards to identify potential security risks and relevant mitigation controls.

Qualifications:

• 5+ years of Tech experience in the cybersecurity area


• Strong knowledge of cybersecurity vulnerability management & EOL process remediation and automation, patching processes and tooling, cyber monitoring, and AI security.


• Knowledge of various source code management systems & cloud environment (such as Azure, AWS, GCP), including understanding of containers/K8s and microservices-based architecture.


• Hands-on scripting with python/shell script/other scripting languages, dashboard visualization & API integration with Power BI & Power Automate, and Working experience as developers or DevOps or SRE would be an added advantage.


• Ability to drive the problem resolution of complex security issues, with strong analytical mindset based on data-driven approach.


• Experience of the implementation of a variety of security tools and documentation of the process.


• Familiarity with MAS TRM guideline or similar regulatory requirements.


• Excellent interpersonal and communication skills, with the ability to deliver the key message of “why”, “what”, and “how” certain things are needed for remediation, with elaboration of the risks, severity and impact.