DevSecOps Engineer/Lead
AiR · Jakarta, Indonesia
Weak hiring record · median 62 days open
All reasons
- Open 96 days
- 57% of this employer's openings are over 60 days old
In its favour
- Still listed on the employer's own board
Role Overview
Help us build the future of secure software by embedding security directly into our development pipelines. You'll lead efforts to automate security checks, ensuring code is compliant and protected from day one.
What We're Looking For
- 4+ years in DevOps, SWE, or AppSec, with 2+ years in DevSecOps
- Deep experience with SAST (Checkmarx, Semgrep), SCA (Snyk), and DAST (Burp Suite)
- Proven success automating security in CI/CD (GitHub Actions, GitLab CI)
- Strong understanding of IaC (Terraform) and containerization (Docker, Kubernetes)
- Ability to read code in Python, Java, Go, or Node.js
Bonus
CDP, CDEP, or CSSLP certifications
What You'll Do
- Integrate and manage security tools (SAST, DAST, SCA) into CI/CD pipelines
- Triage and provide clear remediation guidance for code vulnerabilities
- Automate security policy enforcement within deployment pipelines
- Optimize AppSec tooling to reduce false positives and streamline alerts
Why You'll Love It
- **Shape security strategy** for a growing tech company
- Work with cutting-edge DevSecOps tools and practices
- Opportunity to mentor and lead security initiatives
Skills
- SAST
- Checkmarx
- Semgrep
- SCA
- Snyk
- DAST
- Burp Suite
- GitHub Actions
- GitLab CI
- Terraform
- Docker
- Kubernetes
- Python
- Java
- Go
- Node.js