Senior Security Operation

Glints; Indonesia; On-site; IDR 300,000,000 - 550,000,000; Full time

Job summary

Glints is seeking a senior security professional to strengthen our vulnerability management and patching automation across on‑prem and cloud environments. You will own the vulnerability lifecycle, coordinate remediation, and work with infrastructure, cloud, and application teams to implement controls and resolve vulnerabilities.

The role requires extensive cyber security experience in regulated contexts, strong scripting skills, and hands-on expertise with cloud platforms and automation tools.

Qualifications

• University degree in Computer Science, Computer Engineering, Information Security or Information Systems.
• 12 years of tech experience with at least 8 years in cyber security in regulated environments (bank, insurance, fintech, etc).
• Strong knowledge of vulnerability management, EOL remediation, automation, patching, cyber monitoring, and AI security.
• Experience with cloud providers (Azure, AWS, GCP) and containers/Kubernetes in microservices architectures.
• Hands-on scripting with Python/shell and dashboard visualization; API integration with BI tools.
• Experience as a developer/DevOps/SRE is a plus.
• Familiarity with MAS TRM guidelines or similar regulatory requirements.
• Excellent communication and ability to explain risks, severity, and remediation steps.

Responsibilities

• Own end-to-end vulnerability management lifecycle including assessment, prioritization, remediation coordination and closure validation.
• Automate security patching across platforms and address EOL risks.
• Conduct security assessments and deviation analysis based on threat intel, compliance and business risk.
• Collaborate with infrastructure, cloud and application teams to investigate issues and implement controls.
• Lead security projects from planning to implementation including automation of patching and IAM.
• Assess and implement secure AI and automation technologies to improve security operations.

Skills

Vulnerability management

Patching automation

Python scripting

Cloud environments

Containers/Kubernetes

Power BI

Power Automate

DevOps

Data-driven analysis

Education

University degree in Computer Science / Engineering / Information Security

Tools

Tenable

JIRA

Power BI

Power Automate

Job description

This position requires strong technical depth and hands‑on experience in cloud security, cyber operations, and vulnerability management to strengthen security across on‑premises and cloud environments.

Key objectives include:

• Own the vulnerability management lifecycle, including assessment, risk prioritization, remediation coordination, and closure validation, with hands‑on experience using Tenable.
• Execute and automate security patching across platforms, address end‑of‑life software risks, and improve patch management processes.
• Conduct security assessments and deviation analysis based on threat intelligence, compliance requirements, and business risk.
• Work directly with infrastructure, cloud, and application teams to investigate security issues, implement controls, and resolve vulnerabilities.
• Lead security projects from planning through implementation, including automation across security patching and Identity and Access Management.
• Assess and implement secure AI and automation technologies to improve security operations and controls.

Education:

University degree in one of the following or related disciplines (Computer Science, Computer Engineering, Information Security, Information Systems).

Experience:

• 12 years of Tech experience with at least 8 years of experience in cyber security area in a regulated environment (e.g. bank, insurance, fintech, etc.)
• Strong knowledge of cybersecurity vulnerability management & EOL process remediation and automation, patching processes and tooling, cyber monitoring, and AI security.
• Knowledge of various source code management systems & cloud environment (such as Azure, AWS, GCP), including understanding of containers/K8s and micro‑services‑based architecture.
• Hands‑on scripting with python/shell script/other scripting languages, dashboard visualization & API integration with Power BI & Power Automate, and
• Working experience as developers or DevOps or SRE would be an added advantage.
• Ability to drive the problem resolution of complex security issues, with strong analytical mindset based on data‑driven approach.
• Experience of the implementation of a variety of security tools and documentation of the process
• Familiarity with MAS TRM guideline or similar regulatory requirements
• Excellent interpersonal and communication skill, with ability to deliver the key message of why, what, and how certain things are needed for remediation with elaboration of the risks, severity and impact.

Certifications/licenses:

• Preferably a holder of one or more of the following information security qualifications: GSOC, CSA, ECSA, CISSP, CEH, or similar.

Roles and Responsibilities:

Security Posture Management

• Manage end‑to‑end security patching lifecycle for systems and platforms, ensuring timely remediation of vulnerabilities and end‑of‑life (EOL) software components.
• Collaborate with vulnerability management and infrastructure teams to assess, prioritize, and deploy patches based on risk and business impact.
• Maintain and enhance security patch management processes and documentation, ensuring alignment with best practices, policies & procedures, and compliance requirements.

Security Automation (Scripting, Orchestration, and Dashboard)

• Design, develop, and maintain / enhance security automation scripts and workflows to streamline security patching processes.
• Manage and enhance various reporting dashboards based on JIRA, Power BI, and other technology platforms.
• Ensure automation solutions are scalable, maintainable, and aligned with security policies and standards.

Security Operations Metrics

• Track and populate security operations metrics. Automate as much as possible the process of gathering, analyzing, and presenting the security operation metrics.
• To involve in the preparation of various security reports and deck.

Security Operations Initiatives

• Support the team in various security operations projects and initiatives.
• Involve in security operation automation project and provide contribution, ideas, and deliverables.

Security Deviation Management

• Review and assess security deviation and exception requests proposed by application teams, infrastructure teams, and other stakeholders, ensuring completeness, justification, and alignment with the risk appetite & regulatory requirements.
• Evaluate deviations against relevant attack path analysis, regulatory requirements, security standards, to identify potential security risks and relevant mitigation controls.