Cybersecurity Engineer (Redteam)

Blibli; Jakarta Timur; On-site; IDR 525,210,084 - 875,350,140; Full time

Job summary

Blibli in Jakarta Timur is seeking a Cybersecurity Engineer to protect systems and infrastructure from security threats. The role involves identifying vulnerabilities, conducting penetration testing, and collaborating with engineering teams on security guidelines. Ideal candidates will have 2-5 years of cybersecurity experience, with strong skills in penetration testing, programming in languages like Python or Go, and familiarity with security standards. This position allows for impactful improvements in security practices.

Qualifications

• 2–5 years of experience in cybersecurity areas such as application security, cloud security, network security, or security engineering.
• Hands-on experience in penetration testing (web, mobile, or infrastructure).
• Proficiency in programming/scripting languages such as Python, Go, or Ruby for tool development and code review.

Responsibilities

• Identify and remediate high-priority security vulnerabilities.
• Conduct penetration testing on applications, systems, and services.
• Perform risk assessments, including impact analysis.

Skills

Application Security

Cloud Security

Network Security

Penetration Testing

Programming/Scripting (Python, Go, Ruby)

Education

2–5 years of experience in cybersecurity

Tools

Security Tools and Frameworks

Job description

Cybersecurity Engineer

Protect our systems, applications, and infrastructure from evolving security threats. Identify vulnerabilities, conduct penetration testing, and work closely with engineering teams to ensure timely remediation and strengthen overall security posture.

Responsibilities

• Identify and remediate high-priority security vulnerabilities across web, mobile, infrastructure, cloud, and network environments.
• Conduct penetration testing (static and dynamic) on applications, systems, and services to uncover security weaknesses.
• Perform risk assessments, including impact analysis and providing clear remediation guidelines for developers and business stakeholders.
• Validate security fixes and mitigation efforts to ensure vulnerabilities are effectively resolved.
• Monitor and manage vulnerability remediation progress as part of an ongoing security program.
• Collaborate with development and engineering teams to ensure timely issue resolution.
• Support incident response investigations by providing technical insights and analysis.
• Develop and maintain security guidelines, best practices, and documentation for common vulnerabilities.
• Build and utilize tools, scripts, or exploits to support security testing and red team activities.
• Conduct security research on emerging threats, trends, and technologies.
• Support compliance initiatives such as ISO 27001, PCI DSS, and GDPR.
• Drive improvements in red team processes and security practices, and participate in knowledge‑sharing sessions.

Qualifications

• 2–5 years of experience in cybersecurity areas such as application security, cloud security, network security, or security engineering.
• Hands‑on experience in penetration testing (web, mobile, or infrastructure).
• Proficiency in programming/scripting languages such as Python, Go, or Ruby for tool development and code review.
• Strong knowledge of operating systems: Linux, FreeBSD, macOS, and Windows.
• Understanding of mobile security (iOS and Android platforms).
• Familiarity with security tools, frameworks, and testing methodologies.
• Knowledge of security standards and compliance frameworks (ISO 27001, PCI DSS, GDPR).
• Strong analytical thinking and ability to communicate risks clearly and effectively.
• Relevant certifications such as Pentest+, OSWP, eMAPT, eWPT, or eJPT are a strong advantage.