Security Engineer

• Monitoring & Triage: Lead 24x7 monitoring and triage of security alerts across SIEM (Wazuh), EDR (CrowdStrike), DLP and cloud environments.
• Incident Lifecycle: Lead detection, triage, containment, and post-incident reviews for infrastructure and cloud-layer security events.
• Core Metric Ownership: Drive the reduction of Mean Time to Detect (MTTD) through improved correlation and automated alerting.
• Threat Hunting: Perform proactive threat hunting using MITRE ATT&CK techniques to identify advanced threats before they impact production.
• Infrastructure-as-Code (IaC) Guardrails: Implement and monitor IaC guardrails with automated drift detection to prevent misconfigurations in GCP/AWS.
• Standardized Golden Images: Partner with engineering to deploy immutable infrastructure through standardized "Golden Images" to eliminate manual server hardening.
• SOAR & Response Playbooks: Build and manage automated SOAR (Security Orchestration, Automation, and Response) playbooks to reduce Mean Time to Respond (MTTR) and ensure instant containment of threats.
• Inventory Discovery: Implement automated inventory discovery to ensure "if it isn't tagged, it doesn't run" within cloud environments.
• DLP Governance.
• EDR Administration: Fine-tune and manage CrowdStrike Falcon (Managed Service) and oversee the decommissioning of legacy EDR solutions (Symantec).
• WAF Optimization: Manage and optimize Cloudflare WAF rules to protect application layers against DDoS and web attacks.
• Teleport Governance: Manage secure infrastructure access through Teleport, moving away from legacy SSH/VPN access toward a Zero-Trust identity anchor.
• Asset Monitoring: Monitor for threats targeting hot/cold storage systems and exchange infrastructure.
• Identity Integrity: Enforce the "Identity Anchor" by ensuring all infrastructure access is anchored to the corporate IDP (Google Workspace/JumpCloud).

Cloud Security Engineer

• Leads and mentors a team of direct employees and vendors responsible for the physical security of branches, offices, and other facilities within the country.
• On a routine basis, monitors security personnel and security system performance to ensure all security, safety and compliance requirements are met, including service delivery of all security related vendors.
• Devises local procedures for access control, CCTV surveillance and alarm monitoring in alignment with global and local standards.
• Ensures in-country security system maintenance, minor project works and software/hardware upgrades are executed in alignment with bank stakeholder requirements, global and local standards.
• Manages security and safety incidents, follow-up investigation and reporting to all stakeholders.
• Conducts local risk assessments, makes recommendations on physical security measures and implements them in accordance with global and local standards.
• Ensures security training, certification, tests & drills are periodically conducted and records maintained.
• Keeps senior level management informed on key issues, risks and incidents.
• As the Country level leader of physical security you are the key point of contact for operational security matters and will engage all stakeholders through excellent communication and account management skills.

Security Lead

• Partner with global IT and security teams to align and ensure consistency across regions.
• Respond to escalations Security Operations Teams for threat detection and incident response, coordinating with global teams.
• Manage third-party from both IT and CyberSecurity risks in line with OJK and global policies.
• Implement local and global IT and security awareness programs for employees and users.
• Ensure locally managed systems adhere to global and local security policies and standards. Conduct Regular reviews to ensure compliance.
• Provide Tier 1 and Tier 2 technical support in person, or via email, chat, and video calls.
• Troubleshoot issues related to Windows/macOS, Google Workspace, Office 365, WiFi, and network connectivity.
• Assist with onboarding/offboarding processes including device setup and account provisioning.

See all jobs on JobTailor

Cloud Security Engineer

Security Lead

IT Security Engineer