Security Platform Engineer

This is a fully remote position, open to applicants in Indonesia.

📋 Description

• Design and sustain security platforms, services, tools, and automation utilized by engineering teams.

• Create reusable security functionalities that seamlessly integrate with CI/CD pipelines, cloud environments, and developer workflows.

• Automate processes related to security testing, vulnerability management, policy enforcement, and remediation.

• Incorporate tools for SAST, DAST, software composition analysis, secrets detection, container scanning, and infrastructure-as-code scanning.

• Develop APIs, services, integrations, dashboards, and workflows that enhance security visibility and response.

• Establish automated guardrails for cloud infrastructure, applications, containers, and deployment environments.

• Enhance the collection, enrichment, prioritization, and routing of security findings.

• Minimize false positives and assist engineering teams in receiving clear, actionable security feedback.

• Create self-service security tools that empower developers to identify and resolve issues at an early stage.

• Fortify secrets management, key management, identity controls, and privileged-access workflows.

• Support software supply chain security across source code, dependencies, build systems, artifacts, and deployment processes.

• Implement policy-as-code and automated compliance controls where suitable.

• Enhance security logging, telemetry, monitoring, and alerting across cloud and engineering platforms.

• Collaborate with application security and offensive security teams to automate testing and validation.

• Assist incident response teams by developing investigation, containment, and recovery tools.

• Ensure the reliability, availability, performance, and security of internal security services.

• Produce clear documentation, operational runbooks, and engineering standards.

• Participate in technical design reviews and security architecture conversations.

• Monitor the effectiveness and adoption of security tooling through relevant metrics.

⛳️ Requirements

• Extensive experience in security engineering, platform engineering, DevSecOps, cloud engineering, or software engineering.

• Proven hands-on experience in constructing internal platforms, tools, services, or automation.

• Strong programming or scripting abilities in languages such as Python, Go, Java, JavaScript, or TypeScript.

• Experience in building and integrating APIs, event-driven workflows, and automated services.

• Practical understanding of CI/CD pipelines and contemporary software delivery methodologies.

• Familiarity with cloud platforms such as AWS, Google Cloud, or Azure.

• In-depth knowledge of containers, Kubernetes, infrastructure as code, and cloud-native architectures.

• Experience with tools like Terraform, Docker, Kubernetes, GitHub Actions, GitLab CI, Jenkins, or similar technologies.

• Awareness of application security and cloud security tools.

• Understanding of vulnerability management, secure configuration, secrets management, and identity and access management.

• Experience working with logging, monitoring, observability, or security telemetry platforms.

• Strong grasp of software engineering practices, including testing, version control, code review, and maintainable system design.

• Capability to translate security requirements into scalable and practical engineering solutions.

• Excellent troubleshooting and problem-solving abilities.

• Ability to collaborate effectively across security, engineering, infrastructure, and product teams.

• Proficient written and spoken English skills.

🏝️ Benefits

• High-impact engineering: contribute to security capabilities utilized across Ajaib’s technology organization.

• Meaningful technical challenges: tackle issues spanning cloud, applications, identity, CI/CD, and software supply chains.

• Security at scale: develop platforms and automation that safeguard the business as it expands.

• Developer-focused influence: streamline secure engineering processes to be easier, faster, and more consistent.

• Strong collaboration: engage with application security, DevSecOps, offensive security, cloud, and platform teams.

• Meaningful mission: play a role in protecting customers, investments, personal data, and financial transactions.