Cloud & Infrastructure Security Engineer

Requirements:

1. Min +7 years in IT
2. Min +3 years in Cloud & Infrastructure Security Engineer
3. Cloud security posture: AWS/Azure/GCP — CSPM, CWP, CIEM
4. Infrastructure-as-Code (IaC) security scanning
5. Secure cloud architecture design, shared-responsibility model governance
6. Container & orchestration security: Docker, Kubernetes, service mesh
7. Cloud logging & monitoring: CloudTrail, Azure Monitor, GCP, Security Command Center
8. OJK cloud banking compliance alignment (SEOJK 29/2022 Section on Cloud Services)

Key Activities:

1. Continuous vulnerability scanning across all asset classes (network, endpoint, application, cloud)
2. CVSS-based risk prioritization and remediation SLA enforcement
3. Threat intelligence ingestion, IOC correlation, adversary TTP monitoring via MITRE ATT&CK
4. CSPM policy enforcement across all cloud tenants (AWS/Azure/GCP)
5. Cloud misconfiguration detection, risk scoring, and remediation tracking
6. Cloud workload protection (CWP) alert triage and containment guidance

Deliverables:

1. Vulnerability Register (live)
2. Monthly Threat Intelligence Report
3. Remediation Closure Evidence
4. CSPM Posture Report (monthly)
5. Cloud Risk Register
6. Misconfiguration Remediation Log