jobapplier

Enterprise Security Engineer (SDE 2)

Kredivo Group

Skills

Required

  • EDR
  • phishing
  • simulation
  • SCIM
  • AWS
  • GCP
  • Python
  • Bash
  • blue-team security
  • vulnerability and patch management
  • network security
  • identity and access management protocols
  • SAML

Preferred

  • ISO 27001:2022 / regulatory compliance audits
  • WAF
  • VMDR
  • MDM platforms
  • JumpCloud
  • Intune
  • Jamf
  • Cloudflare
  • PowerShell

You will run and maintain our security platforms, remediate vulnerabilities across the fleet, and harden our infrastructure using zero trust and secure-by-default principles. You will work with IT, DevOps and Engineering across Indonesia and internationally, and report to the Enterprise Security Lead.

Responsibilities

Endpoint, Vulnerability & Patch Management

  • Deploy, manage and maintain security platforms: EDR, VMDR, DLP, Cloudflare (Zero Trust/WAF) and the Email Security Gateway.
  • Identify and remediate vulnerabilities in internal systems, and track remediation against SLA.
  • Deploy patches and remediation scripts through MDM/RMM tools.
  • Check that endpoint security agents are deployed and healthy across the fleet.

Identity, SaaS & Cloud Hardening

  • Work with IT and DevOps to harden Cloud Directory, Google Workspace, VPN and other SaaS tools.
  • Set up and maintain SSO, SCIM provisioning, MFA and access controls.
  • Support security configuration reviews of AWS and GCP environments.
  • Apply zero trust and secure-by-default practices in day-to-day work.
  • Monitor internal and external systems for security threats, and triage and respond to alerts.
  • Support Cyber Defense with containment actions during incidents.

Security Awareness & Policy

  • Contribute to and enforce IT and Security policies and procedures.
  • Run phishing simulations and support security awareness programs.
  • Educate employees on data security, and advise them on securing endpoints, office AV and network infrastructure.

Automation & Audit

  • Automate routine security tasks and reporting using Python, Bash or PowerShell.
  • Support ISO 27001:2022 and regulatory audits by providing evidence and remediating gaps.
  • Growth mindset: you keep learning and keep up with the threat landscape.

Requirements

  • 3-4 years of blue-team security experience, preferably in a startup environment.
  • Experience deploying and managing endpoint security tools (EDR, vulnerability and patch management, network security, phishing simulation).
  • Experience with identity and access management protocols (SAML, OAuth, SCIM).
  • Experience with public cloud providers (AWS, GCP).
  • Scripting experience (Python, Bash or similar).
  • Knowledge of modern adversary tactics, techniques and procedures.
  • Experience working with cross-functional teams, especially engineering.
  • Good English communication skills.
  • Communication: you explain security practices clearly to employees and teams.

Preferred

  • Experience with ISO 27001:2022 or regulatory compliance audits.
  • Experience with MDM platforms (e.g. JumpCloud, Intune, Jamf).
  • Certifications such as Security+, CySA+, or vendor certifications (EDR, WAF, VMDR) are a plus.

Benefits

  • Ownership: you manage and run BAU tasks on your own and support projects through to completion.
  • Risk-driven: you focus your effort where it reduces the most risk.
  • Collaboration: you work with empathy alongside colleagues in IT, DevOps and Engineering.