Lead Cloud Security Engineer - CISO

About the Role

If you’re looking to be a part of a dynamic, highly analytical team that enjoys working closely with cloud infrastructure systems and security, look no further. As a Cloud Security Engineer for GoTo, you will be handed the reins in security for GoTo. Along with the Products, Engineering, and other related teams, you will be in charge of building, maintaining, and improving security measures to ensure our environment and applications are secure from threats. The cherry on top: you’ll get to be a part of a team that works as a security enabler of our system.

What You Will Do:
• Design, build, and operate scalable security solutions across cloud platforms, ensuring resilience, high availability, and automation at scale.
• Architect and implement cloud security controls, including access management, network security, encryption, and threat detection, following industry best practices.
• Develop and enforce secure cloud infrastructure standards, ensuring compliance with security and regulatory requirements.
• Enhance container security, ensuring secure orchestration, deployment, and runtime protection.
• Build automation and tooling to enforce cloud security policies, integrate security into development workflows, and improve operational efficiency.
• Define and enforce cloud security policies, collaborating with engineering teams to drive adoption and ensure consistent implementation.
• Develop security detections to identify and respond to threats in cloud environments.
• Work cross-functionally to influence security best practices, foster a strong security culture, and drive continuous improvements.

What You Will Need:
• Experience with Cloud Platforms (Alibaba, Tencent, GCP, etc)
• Proficiency in Infrastructure as Code (IaC) tools such as Terraform, Ansible, or equivalent.
• Experience securing containerized workloads, including Docker and Kubernetes.
• 7+ years of experience in designing, developing, deploying, and managing security solutions for large-scale cloud environments.
• Strong background in security monitoring and detection engineering for cloud environments.
• Hands-on experience in building security automation and tooling, integrating security into CI/CD pipelines.
• Excellent written & verbal communication skills to collaborate across engineering, security, and leadership teams.

About the Team

The Cloud Security team in GoTo is responsible for driving security and privacy by design within the Infrastructure lifecycle and engineering processes besides continuously researching and responding to evolving threats that could impact the GoTo product’s viability to service its customers and remain compliant with the local laws and regulations as amicable.

As a team, we’re concerned not only with the growth of the company, but each other’s personal and professional growths, too. Along with a common drive to jump over technical barriers and provide sustainable solutions, our team bonds over our shared love for coffee, movies, and TV shows.

About GoTo Group
GoTo Group is the largest digital ecosystem in Indonesia with its mission to “Empower Progress’ by offering technological infrastructure and solutions for everyone to access and thrive in the digital economy. The GoTo ecosystem consists of on-demand transportation services, food and grocery delivery, logistics and fulfillment, as well as financial and payment services through the Gojek and GoTo Financial platforms.It is the first platform in Southeast Asia that hosts these crucial cases in a single ecosystem, capturing the majority of Indonesia’s vast consumer household.

About Gojek
Gojek is Southeast Asia’s leading on-demand platform and pioneer of the multi-service ecosystem with over 2.5 million driver partners across the regions offering a wide range of services such as transportation, food delivery, logistics and more. With its mission to create impact at scale, Gojek is committed to resolving consumer problems and raising standards of living by connecting consumers to the best providers of goods and services in the market.

About GoTo Financial
GoTo Financial accelerates financial inclusion through its leading financial services and merchants solutions. Its consumer services include GoPay and GoPayLater and serve businesses of all sizes through Midtrans, Moka, GoBiz Plus, GoBiz, and Selly. With its trusted and inclusive ecosystem of products, GoTo Financial is open to new growth opportunities and aims to empower everyone to Make It Happen, Make It Together, Make It Last.

GoTo and its business units, including Gojek and GoToFinancial ("GoTo") only post job opportunities on our official channels on our respective company websites and on LinkedIn. GoTo is not liable for any job postings or job offers that did not originate from us. You should conduct your own due diligence to prevent being victims of any fake job scams, if they did not originate from GoTo's official recruitment channels.

#LI-HYBRID