{"id":24319,"url":"https://alion.io/job/ajaib-devsecops-engineerlead","title":"Lead, DevSecOps Engineer","company":{"id":6657,"name":"Ajaib","domain":"ajaib.co.id","url":"https://alion.io/company/ajaib","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"A","score":88,"open_postings":35,"ghost_share":0.114,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":247,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Jakarta, Indonesia"],"countries":["ID"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18500,"max_usd":48000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bitbucket","optional":false},{"name":"Burp Suite","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"Java","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"Node JS","optional":false},{"name":"Python","optional":false},{"name":"Semgrep","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"Terraform","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-06-15T00:00:00Z","employer_posted_date":"2026-06-15","last_verified_at":"2026-10-16T08:07:36Z","board_verified":true,"closed_at":null,"days_open":123,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":123},"description":"Founded to transform retail finance, Ajaib Group is an Indonesian fintech unicorn breaking barriers to financial access. Having recently secured a $270M Series C-the single largest funding round in Southeast Asia over the past four years-we are backed by premier global investors including Y Combinator, Ribbit Capital, SoftBank, and SBI Holdings.\nTo build world-class products, we assemble world-class talent. Supported by our fully remote work arrangement, our team spans Eastern Europe, the Middle East, India, and Southeast Asia, allowing you to work with brilliant engineers and builders from around the globe from wherever you are. We operate with an impact-driven purpose where everyone is the owner of our customers' satisfaction. Driven by a growth mindset and a fierce will to win, we refuse to settle and constantly push engineering boundaries.\nRole Overview\nAs a DevSecOps Engineer, you will bridge the gap between development, operations, and information security. Reporting to the Application Security Lead, you will architect, maintain, and scale security automation across our software development lifecycles (SDLC). Your primary mandate is to shift security left by embedding SAST, DAST, and SCA tools directly into modern CI/CD pipelines, eliminating security bottlenecks and ensuring continuous code compliance.\nKey Responsibilities\nPipeline Security Automation: Integrate and manage static, dynamic, and software composition analysis tools into continuous integration and continuous deployment (CI/CD) pipelines.\nTooling Optimization: Own, configure, and fine-tune AppSec platforms including Checkmarx, Semgrep, Snyk, and SonarQube to minimize false positives and maximize actionable alerts.\nAutomated & Manual DAST: Configure automated dynamic scanners and leverage Burp Suite Professional for targeted security testing on APIs and web services.\nVulnerability Remediation & Triage: Act as the primary technical point of contact to triage code vulnerabilities, providing clear remediation guidance and proof-of-concept fixes directly to engineering teams.\nOpen Source Security (SCA): Utilize Snyk and similar tools to monitor open-source dependencies, license compliance, and third-party software supply chain vulnerabilities.\nPolicy Enforcement: Define automated gatekeeping thresholds (e.g., failing builds for critical/high vulnerabilities) within the deployment pipeline based on internal security policies.\nRequirements\nExperience: 4+ years of experience in DevOps, software engineering, or application security, with at least 2+ years dedicated exclusively to DevSecOps practices.\nTooling Command: Proven, deep technical proficiency with the following tools:\nSAST: Checkmarx, Semgrep, SonarQube\nSCA & Container Security: Snyk\nDAST / Pen-testing: Burp Suite Professional\nCI/CD Ecosystems: Extensive experience building automation plugins and pipelines in GitHub Actions, GitLab CI, Jenkins, or Bitbucket Pipelines.\nInfrastructure as Code (IaC): Solid understanding of cloud-native infrastructure, containerization (Docker, Kubernetes), and secure IaC deployment (Terraform).\nDevelopment Background: Ability to read and understand code snippets across multiple languages (e.g., Python, Java, Go, Node.js).\nCertifications: Certifications such as Certified DevSecOps Professional (CDP), Practical DevSecOps (CDEP), or CSSLP are highly preferred\nBenefits\nPerformance Bonus - Get rewarded for the impact you make\nPrivate Insurance - Comprehensive health coverage for you \nPaid Time Off - Take the time you need to recharge and come back stronger\nLearning & Development - Company-sponsored training, courses, and professional certifications\nHybrid Work Arrangement - Enjoy the flexibility of working both remotely and from the office\nCareer Growth - Work closely with experienced leaders and take on meaningful ownership as we scale\nEmployee Perks - Enjoy exclusive discounts, partnerships, and lifestyle perks\nCollaborative & High-Ownership Culture - Work with smart, driven people in cross-functional teams, take ownership, and make a meaningful impact for our users.","description_format":"text","description_chars":4088,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"Indonesia","iso":"ID","kind":"country"},{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Investing Apps & Robo-Advisors","Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-06-15T00:00:00Z"}],"visa":[],"liveness":{"score":80,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.892,"p_room":0.9,"age_days":123,"expected_fill_days":247,"reasons":["conf:2","velocity","win:mid"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/ajaib-devsecops-engineerlead","json_url":"https://alion.io/job/ajaib-devsecops-engineerlead.json","meta":{"generated_at":"2026-10-16T10:05:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8410,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6657},"rest":"https://alion.io/mcp/rest/get_company?id=6657"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fajaib-devsecops-engineerlead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fajaib-devsecops-engineerlead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fajaib-devsecops-engineerlead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ajaib-devsecops-engineerlead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fajaib-devsecops-engineerlead"}]}