Vulnerability Management DevOps and Incident Responder

Macquarie Group; Indonesia; On-site; IDR 100.000.000 - 200.000.000; Full time

Job summary

A global financial services firm in Indonesia is seeking a Vulnerability Management DevOps and Incident Responder. The ideal candidate will have at least 3 years of experience in vulnerability management or application security, with strong skills in Python and stakeholder communication. This role involves coordinating incident responses, automating workflows, and delivering actionable guidance to stakeholders. Join a team that values continuous improvement in addressing business challenges.

Qualifications

• Minimum 3 years of proven experience in vulnerability management or application security.
• Strong understanding of vulnerability risk frameworks and prioritization techniques.
• Demonstrated hands-on experience in vulnerability incident response.

Responsibilities

• Coordinate or lead vulnerability incident response including triage and stakeholder communication.
• Automate workflows using Python and APIs.
• Engage with stakeholders and provide actionable remediation guidance.

Skills

Vulnerability management

Application security

Python

Stakeholder communication

Continuous improvement mindset

Tools

Network vulnerability scanners

SAST tools

APIs

Job description

Vulnerability Management DevOps and Incident Responder

• Minimum 3 years of proven experience in vulnerability management, application security, or a relevant transferable role.
• Strong understanding of vulnerability risk frameworks and prioritisation techniques (e.g., CVSS, EPSS, KEV, exploit intel), and experience contextualising findings with asset criticality and business impact.
• Demonstrated hands‑on experience in coordinating or leading vulnerability incident response, including triage, stakeholder communication, remediation tracking, and post‑incident review.
• Operational experience with agent‑based and network vulnerability scanners, as well as exposure to container security, Software Composition Analysis (SCA), and Static Application Security Testing (SAST) tools. Familiarity with CNAPP and ASM platforms is a plus.
• Proficiency in Python, with experience automating workflows using APIs, event‑driven processes, and job orchestration tools.
• Strong interest in leveraging AI and automation to address business challenges.
• Excellent stakeholder engagement and communication skills, with the ability to deliver pragmatic and actionable remediation guidance.
• A continuous improvement mindset, with a willingness to challenge the status quo and streamline manual workflows.