{"id":3142270,"url":"https://alion.io/job/jubelio-senior-security-engineer-appsec-devsecops","title":"Senior Security Engineer (AppSec / DevSecOps)","company":{"id":49966,"name":"Jubelio","domain":"jubelio.com","url":"https://alion.io/company/jubelio","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Jakarta, Indonesia"],"countries":["ID"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":15000000,"max":22000000,"currency":"IDR","period":"month","gross":true,"usd_annual":17160},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVSS","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Node JS","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"STRIDE","optional":false},{"name":"TypeScript","optional":false},{"name":"JavaScript","optional":true}],"status":"live","first_seen_at":"2026-10-23T03:54:36Z","employer_posted_date":null,"last_verified_at":"2026-10-23T03:54:36Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"Responsibilities\n\nBuild and run Jubelio's security function as the first dedicated Security Engineer, reporting to the VP of Technology.\nPerform threat modelling across applications, infrastructure, repositories and third-party integrations, and turn the results into a prioritised list of what to patch first.\nOwn security risk scoring and the risk register, so that severity reflects real business impact.\nTriage and validate findings from vulnerability scanners, SIEM alerts, code scanning and external reports, and escalate only what matters.\nAnalyze monthly security reports and turn them into clear decisions and actions for engineering and management.\nHandle security incidents end to end: detection, containment, investigation and post-incident improvements.\nReview code and architecture for security risks, and work with developers to fix them.\nDefine security standards and frameworks (secure development, secrets, access, vulnerability management) that engineers can follow.\nDecide which areas need penetration testing, scope the work with external vendors, challenge their reports and verify the fixes.\nWork with GRC so that security controls and evidence meet compliance requirements.\nCoordinate with DevOps and development squads, who own remediation under our agreed SLA.\n\nRequirements\n\nBachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience.\nMinimum 3 years of experience in security engineering, AppSec, DevSecOps or a similar role.\nHands-on experience in threat modelling (STRIDE, attack trees or similar) on real systems.\nAble to read code and review pull requests for security issues in at least one of: Go, NodeJS, or TypeScript.\nExperience with cloud and container security, preferably Kubernetes (RBAC, network policy, secrets management).\nExperience handling real security incidents and writing post-incident reviews.\nExperience with vulnerability management and security monitoring, including SIEM, vulnerability scanners and SAST/SCA tools.\nStrong risk judgment: able to prioritise by real exploitability and business impact, not only CVSS scores.\nExperience scoping and managing penetration tests with external vendors is an advantage.\nKnowledge of compliance frameworks (ISO 27001, SOC 2, NIST Cybersecurity) is an advantage.\nGood communicator who can influence engineers without formal authority. Fluent in English and Bahasa Indonesia.\nComfortable building from zero, with a strong sense of ownership. You will be the only security engineer at first.\nCertifications such as OSCP, OSWE, CKS or CISSP are a plus, but demonstrated experience matters more.","description_format":"text","description_chars":2646,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","DevSecOps","E-commerce Platforms"],"lifecycle":[{"event":"open","at":"2026-10-23T09:00:50Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":28,"reasons":["seen:1","win:early"],"computed_at":"2026-10-24T06:02:35Z"},"pay":{"stated_usd_annual":17160,"is_top_pay":false},"html_url":"https://alion.io/job/jubelio-senior-security-engineer-appsec-devsecops","json_url":"https://alion.io/job/jubelio-senior-security-engineer-appsec-devsecops.json","meta":{"generated_at":"2026-10-24T13:21:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"assistant_verified","counted_by":"address","units_charged":1,"used_today":2214,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49966},"rest":"https://alion.io/mcp/rest/get_company?id=49966"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjubelio-senior-security-engineer-appsec-devsecops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjubelio-senior-security-engineer-appsec-devsecops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjubelio-senior-security-engineer-appsec-devsecops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/jubelio-senior-security-engineer-appsec-devsecops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjubelio-senior-security-engineer-appsec-devsecops"}]}