{"id":3314573,"url":"https://alion.io/job/amartha-senior-security-engineer-cloud-and-platform-security","title":"Senior Security Engineer (Cloud and Platform Security)","company":{"id":49953,"name":"Amartha","domain":"amartha.com","url":"https://alion.io/company/amartha","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"C","score":58,"open_postings":378,"ghost_share":0.608,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":78,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Jakarta, Indonesia"],"countries":["ID"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17500,"max_usd":40000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Configuration Management","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"SIEM","optional":false},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-27T04:38:17Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-29T14:17:40Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":2},"description":"About Amartha\nAmartha is a technology company focused on creating shared prosperity by developing digital financial solutions for the grassroots economy. Founded in 2010 as a microfinance institution, Amartha connects rural, women-led micro-enterprises with affordable capital. Amartha is expanding as a tech company, building a microfinance ecosystem that connects to the growing digital economy through capital, investment, and payment services. By boosting the competitiveness of micro and small entrepreneurs, Amartha empowers women-led MSMEs, creates jobs, and fosters inclusive economic growth.\nOur Empowered to Grow culture guides how we work together. We Focus on Clarity, Take the Lead, and Grow Impact, empowering our people to take ownership and create meaningful, lasting impact.\nAbout the role\nAmartha is an Indonesian fintech group that provides financial services to micro-entrepreneurs through several licensed entities in lending, payments, and related services. Our production platform runs on Google Cloud and Kubernetes, and our security team is building the controls, detection, and automation that a regulated lender needs at that scale.\nWe are looking for a Senior Security Engineer to own cloud and platform security engineering. You will run the controls that detect and prevent misconfiguration and intrusion across our cloud and container estate, respond to what our detection stack surfaces, and turn manual security infrastructure into code. You will work alongside DevOps and platform engineering, and your work feeds directly into our ISO 27001 and regulator audit evidence.\nThis is a hands-on individual contributor role with a wide mandate. You will be the senior voice on cloud security in the team, and we expect you to set the technical direction for it rather than wait for a backlog.\nWhat you will do\nOwn container and cloud runtime security: workload isolation, Kubernetes hardening, and runtime threat detection.\nRun and extend automated benchmark and configuration scanning across our cloud platform and productivity suite, and act on what it finds.\nBuild shift-left security into CI/CD: infrastructure-as-code scanning and misconfiguration gates before deployment.\nBring the security team's own cloud estate under infrastructure as code. Provisioning is manual and drift-prone today, and ending that is a named deliverable of this role.\nBuild and run the deployment pipeline for our security tooling, so security infrastructure ships the same way the product does.\nOwn the SIEM platform end to end: network isolation, version currency, configuration management, and detection coverage across critical workloads.\nRespond to and review security alerts, tune detection rules, and cut false positives.\nManage edge and perimeter security: web application firewall rules, DNS and traffic visibility, and security event retention.\nManage the platform and console access paths that sit with security engineering.\nDocument what you build, to the standard where another engineer can operate it without you. Continuity is a measured outcome of this role, not a nice-to-have.\nShare the information security on-call rotation, and help us establish it.\nProduce the control evidence our auditors and regulators ask for, with the GRC team.\nWhat you bring\n5 or more years in security engineering, infrastructure engineering, or SRE, with at least 3 years focused on cloud and container security.\nHands-on depth in public cloud and Kubernetes security: identity and access management, RBAC, workload identity, network policy, admission control, runtime detection, and secret management. Google Cloud is our primary platform.\nProduction experience with a SIEM, including deployment, detection rule authoring, and alert triage.\nInfrastructure as code in practice, not in theory: reusable modules, state management, and deployment pipelines you built and operated yourself.\nExperience embedding security scanning into CI/CD, such as infrastructure-as-code scanning, static analysis, container image scanning, or policy as code.\nWorking knowledge of cloud benchmark and hardening standards, and the judgement to decide which findings matter.\nScripting and automation in Python, Go, or Bash.\nA documentation habit. We need an engineer who writes runbooks without being asked, because the gap this role fills is as much continuity as it is technical.\nFluent written and spoken Bahasa Indonesia and English.\nNice to have\nExperience in a regulated financial institution: bank, multifinance company, P2P lending platform, payment provider, or e-money issuer.\nFamiliarity with Indonesian regulation on information technology risk and data protection in financial services, in particular POJK 4/2021 and UU PDP.\nExposure to ISO 27001 control evidence, internal audit, or external certification audits.\nCloud or Kubernetes security certification: GCP Professional Cloud Security Engineer, CKS, or equivalent.\nExposure to threat intelligence platforms, vulnerability and finding management, or cloud compliance and posture management.\nExperience building or running an on-call rotation for a security function.\nMulti-cloud exposure, in particular a migration between major cloud providers.\nAt Amartha, we are dedicated to creating a workplace that celebrates diversity, ensures equity, and fosters inclusion. We believe that diverse perspectives-shaped by factors such as gender, age, race, ethnicity, education, culture, and life experiences-drive innovation and growth.\nWe actively welcome individuals from all backgrounds to join us in building an environment where everyone feels respected, valued, and empowered. Our commitment is to provide equal opportunities and foster a sense of belonging that enables our employees to thrive and make meaningful contributions.","description_format":"text","description_chars":5781,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"Indonesian","level":"All levels","optional":false}]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Crowdfunding & P2P Lending","Microfinance"],"lifecycle":[{"event":"open","at":"2026-10-27T04:38:17Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.602,"p_room":1,"age_days":2,"expected_fill_days":78,"reasons":["seen:2","stale_co","win:early","comp:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/amartha-senior-security-engineer-cloud-and-platform-security","json_url":"https://alion.io/job/amartha-senior-security-engineer-cloud-and-platform-security.json","meta":{"generated_at":"2026-10-29T15:45:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23586,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49953},"rest":"https://alion.io/mcp/rest/get_company?id=49953"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Famartha-senior-security-engineer-cloud-and-platform-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Famartha-senior-security-engineer-cloud-and-platform-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Famartha-senior-security-engineer-cloud-and-platform-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/amartha-senior-security-engineer-cloud-and-platform-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Famartha-senior-security-engineer-cloud-and-platform-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3314573}},{"tool":"search_jobs","arguments":{"company":"amartha.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3314573},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}