Senior Security Operation

Glints; Batam; On-site; IDR 120,000,000 - 240,000,000; Full time

Job summary

Glints is seeking a senior security-focused professional to own vulnerability management and automation initiatives across on-premises and cloud environments. The role emphasizes patches, risk-based remediation, and collaboration with infrastructure and development teams to strengthen security postures.

The candidate should have extensive experience in regulated industries, strong scripting skills, and a track record of driving security improvements through automation and data-driven decision

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Information Security or related field.
• 12+ years of tech experience with 8+ years in cybersecurity in regulated environments (bank/fintech/insurance).
• Strong knowledge of vulnerability management, EOL remediation, patching, cyber monitoring, and AI security.
• Experience with cloud environments (Azure/AWS/GCP) and containers/K8s; scripting in Python/Shell; data visualization and API integration.

Responsibilities

• Manage end-to-end vulnerability management lifecycle with risk-based remediation.
• Automate security patching across platforms and address EOL risks.
• Conduct threat-informed security assessments and deviation analyses.
• Collaborate with infrastructure, cloud, and application teams to remediate issues.
• Lead security projects from planning to implementation, incl. automation of patching and IAM.
• Evaluate secure AI and automation technologies to improve security operations.

Skills

Cloud security

Vulnerability management

Automation scripting

DevOps / SRE experience

Data-driven analysis

Threat intelligence

Regulated environment awareness

Security governance & compliance

Education

Bachelor's degree in Computer Science/Information Security or related

Tools

Tenable

Azure

AWS

GCP

Kubernetes / containers

Power BI

Power Automate

JIRA

Job description

This position requires strong technical depth and hands-on experience in cloud security, cyber operations, and vulnerability management to strengthen security across on-premises and cloud environments.

Key objectives include:

• Own the vulnerability management lifecycle, including assessment, risk prioritization, remediation coordination, and closure validation, with hands‑on experience using Tenable.
• Execute and automate security patching across platforms, address end‑of‑life software risks, and improve patch management processes.
• Conduct security assessments and deviation analysis based on threat intelligence, compliance requirements, and business risk.
• Work directly with infrastructure, cloud, and application teams to investigate security issues, implement controls, and resolve vulnerabilities.
• Lead security projects from planning through implementation, including automation across security patching and Identity and Access Management.
• Assess and implement secure AI and automation technologies to improve security operations and controls.

Education:

University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).

Experience:

• 12 years of Tech experience with at least 8 years of experience in cyber security area in a regulated environment (e.g. bank, insurance, fintech, etc.)
• Strong knowledge of cybersecurity vulnerability management & EOL process remediation and automation, patching processes and tooling, cyber monitoring, and AI security.
• Knowledge of various source code management systems & cloud environment (such as Azure, AWS, GCP), including understanding of containers/K8s and micro‑services-based architecture.
• Hands‑on scripting with python/shell script/other scripting languages, dashboard visualization & API integration with Power BI & Power Automate, and
• Working experience as developers or DevOps or SRE would be an added advantage.
• Ability to drive the problem resolution of complex security issues, with strong analytical mindset based on data‑driven approach.
• Experience of the implementation of a variety of security tools and documentation of the process
• Familiarity with MAS TRM guideline or similar regulatory requirements
• Excellent interpersonal and communication skill, with ability to deliver the key message of “why”, “what”, and “how” certain things are needed for remediation with elaboration of the risks, severity and impact.

Certifications/licenses:

• Preferably a holder of one or more of the following information security qualifications: GSOC, CSA, ECSA, CISSP, CEH, or similar.

Roles and Responsibilities:

Security Posture Management

• Manage end-to-end security patching lifecycle for systems and platforms, ensuring timely remediation of vulnerabilities and end‑of‑life (EOL) software components.
• Collaborate with vulnerability management and infrastructure teams to assess, prioritize, and deploy patches based on risk and business impact.
• Maintain and enhance security patch management processes and documentation, ensuring alignment with best practices, policies & procedures, and compliance requirements.

Security Automation (Scripting, Orchestration, and Dashboard)

• Design, develop, and maintain / enhance security automation scripts and workflows to streamline security patching processes.
• Manage and enhance various reporting dashboards based on JIRA, Power BI, and other technology platforms.
• Ensure automation solutions are scalable, maintainable, and aligned with security policies and standards.

Security Operations Metrics

• Track and populate security operations metrics. Automate as much as possible the process of gathering, analyzing, and presenting the security operation metrics.
• To involve in the preparation of various security reports and deck.

Security Operations Initiatives

• Support the team in various security operations projects and initiatives.
• Involve in security operation automation project and provide contribution, ideas, and deliverables.

Security Deviation Management

• Review and assess security deviation and exception requests proposed by application teams, infrastructure teams, and other stakeholders, ensuring completeness, justification, and alignment with the risk appetite & regulatory requirements.
• Evaluate deviations against relevant attack path analysis, regulatory requirements, security standards, to identify potential security risks and relevant mitigation controls.