Application Security Engineer - DevSecOps & Secure Code

AVOWS GLOBAL IT SOLUTIONS PRIVATE LIMITED; Jakarta Pusat; On-site; IDR 180,000,000 - 240,000,000; Full time

Job summary

AVOWS GLOBAL IT SOLUTIONS PRIVATE LIMITED is seeking a senior security specialist to drive secure coding practices across web, mobile, and API platforms. The role emphasizes SAST/DAST, DevSecOps integration, and vulnerability remediation within enterprise SDLC frameworks.

You will analyze findings, prepare remediation guidance, and share best practices via knowledge sessions with stakeholders. The candidate should have deep OWASP knowledge and strong Jira-based collaboration.

Qualifications

• Bachelor's degree in IT, CS, IS, Eng, or related field is required.
• Minimum 4 years’ experience in Application Security, Secure Code Review, DevSecOps, Cyber Security, or Security Assessment.
• Experience in Secure Code Review for web, mobile, and API applications.
• Experience with DevSecOps, SDLC, CI/CD, and security testing integration.
• Able to analyze SAST, DAST, and preferably SCA findings.
• Strong knowledge of OWASP Top 10, Secure Coding, API Security, Authentication & Authorization, and basic Cryptography.
• Experienced in Application & Infrastructure Hardening Review.
• Able to assess vulnerabilities, classify findings, and provide remediation recommendations.
• Familiar with Jira/ticket management, documentation, reporting, and stakeholder communication.
• Support Secure Code Review, Hardening Review, vulnerability remediation, DevSecOps implementation, and security compliance activities.
• Conduct knowledge sharing on Secure Coding, OWASP, SAST/DAST, and Application Security.

Education

Bachelor's degree in IT, Computer Science, Information Systems, Engineering, or related field

Tools

Jira

Job description

AVOWS GLOBAL IT SOLUTIONS PRIVATE LIMITED is seeking a senior security specialist to drive secure coding practices across web, mobile, and API platforms. The role emphasizes SAST/DAST, DevSecOps integration, and vulnerability remediation within enterprise SDLC frameworks.

You will analyze findings, prepare remediation guidance, and share best practices via knowledge sessions with stakeholders. The candidate should have deep OWASP knowledge and strong Jira-based collaboration.