Enterprise Security Engineer

About the Role

The Enterprise Security Engineer plays a crucial role in Amartha. You will be the warrior who will spearhead various Enterprise Security programs to protect Amartha from internal and external threats.

About the team

The Information Security team in Amartha is a group of dynamic, highly-analytical individuals who are highly mindful in driving security and privacy by design within the various aspects of product lifecycle and engineering processes. We are the team who are highly passionate to be the security enabler of Amartha’s systems

Job Desc/What will you do

• Develop and maintain the enterprise security architecture strategy, including policies, standards, and guidelines.
• Design and implement security solutions, ensuring they meet security best practices and compliance requirements.
• Monitor internal and external systems for security threats and respond to alerts.
• Collaborate with stakeholders to gather security requirements and help translate them into effective security architectures.
Identify business and technical security requirements, design security controls, provide guidance and advice on testing their effectiveness while ensuring the product implemented address both business and security needs​
• Provide expert support, analysis, research, and advice on complex cyber security problems, and processes
• Partner with risk management to quantify risks and translate complex IS issues into business language
• Identify industry and technology trends, opportunities, and security gaps and help convert these into technical requirements

Requirements:
• 5+ years of related job experience
• Excellent analytical and interpersonal skills
• Ability to express technical information clearly at different organizational levels
• Experience deploying and managing endpoint security solutions (e.g. management frameworks, EDR tools).
• Experience with public cloud service providers (e.g. GCP, AWS)
• Experience with identity and access management frameworks and protocols, including SAML, OAUTH, and SCIM.
• Experience with e-mail security protocols (e.g. SPF, DKIM, DMARC) and controls.
• Intermediate or advanced proficiency with a scripting language (e.g. Python, Bash, or similar).
• Tools familiarity : Google Workspace, Wazuh, Forcepoint, Crowdstrike, SentinelOne, Elastic-Logstash-Kibana Stack, and various enterprise security

At Amartha, we are dedicated to creating a workplace that celebrates diversity, ensures equity, and fosters inclusion. We believe that diverse perspectives—shaped by factors such as gender, age, race, ethnicity, education, culture, and life experiences—drive innovation and growth.

We actively welcome individuals from all backgrounds to join us in building an environment where everyone feels respected, valued, and empowered. Our commitment is to provide equal opportunities and foster a sense of belonging that enables our employees to thrive and make meaningful contributions.