Cybersecurity Engineer (Infrastructure Security)

Blibli; Indonesia; On-site; IDR 400,000,000 - 720,000,000; Full time

Job summary

Blibli is seeking a Cybersecurity Engineer (Infrastructure Security) to design, implement, and continually improve cloud and infrastructure security controls for its Indonesia-based platform. You will protect customer trust and support PCI DSS and ISO 27001 compliance while embedding security into engineering processes to enable rapid, secure software delivery.

You will work with Engineering, Platform, SRE, and Product teams to enforce least-privilege IAM, automate security through IaC, and

Qualifications

• Bachelor's degree in a technical field.
• 3–5 years in Infrastructure/Cloud Security or related areas.
• Hands-on experience securing production infrastructure environments.
• Proficient in Bahasa Indonesia and English for docs and audits.
• Strong experience with AWS, GCP and Azure.

Responsibilities

• Design, implement, and maintain cloud security architectures.
• Enforce secure infrastructure patterns and IAM least-privilege models.
• Perform CSPM and remediate misconfigurations.
• Conduct threat modeling for new products and platform changes.
• Apply CIS Benchmark hardening to Linux, Kubernetes, databases, and cloud.
• Integrate security controls into CI/CD and IaC workflows.
• Develop IaC security controls for Terraform and CloudFormation.
• Strengthen Kubernetes security: RBAC, policies, image security.
• Support IAM initiatives: SSO, SAML, OIDC, secrets management.
• Produce compliance evidence for PCI DSS and ISO 27001 audits.
• Run third-party security assessments and handle on-call incidents.
• Collaborate with engineering to shift security left in SDLC.
• Monitor threat landscape and improve security posture.

Skills

Cloud security

Infrastructure security

Python

Golang

AWS

GCP

Azure

Linux

Kubernetes

IAM

Education

Bachelor's degree

Tools

Terraform

CloudFormation

CI/CD tooling

Job description

Blibli is on a journey to become Indonesia’s #1 e-commerce platform — built on trust, innovation, and care. We’re creating better experiences for customers, merchants, brands, and sellers through technology, collaboration, and a deep commitment to quality. Here, every idea matters and every action helps us grow stronger together.

As a Cybersecurity Engineer (Infrastructure Security) , you will play a critical role in securing and enabling our e-commerce platform by designing, implementing, and continuously improving cloud and infrastructure security controls. This role focuses on protecting customer trust, ensuring business continuity, supporting compliance requirements such as PCI DSS and ISO 27001, and embedding security into engineering processes so that teams can ship products quickly and securely without compromising risk management.

What You’ll Work On Together

• Design, implement, and maintain cloud security architectures across AWS, GCP, or Azure environments.
• Develop and enforce secure infrastructure patterns, including IAM least-privilege models, network segmentation, encryption, and audit logging.
• Perform cloud security posture assessments and remediate infrastructure misconfigurations identified through CSPM tools.
• Conduct threat modeling exercises (e.g., STRIDE) for new products, services, and major platform changes.
• Implement and maintain CIS Benchmark-based hardening standards across Linux servers, Kubernetes clusters, databases, containers, and cloud environments.
• Collaborate with Engineering, Platform, SRE, and Product teams to integrate security controls into CI/CD pipelines and infrastructure workflows.
• Build and maintain security automation solutions using Python, Go, Bash, or similar technologies.
• Develop Infrastructure-as-Code (IaC) security controls and policy-as-code implementations for Terraform and CloudFormation environments.
• Design and improve Kubernetes security controls, including RBAC, admission controls, network policies, image security, and workload protection.
• Support identity and access management initiatives, including SSO, SAML, OIDC, privileged access management, service accounts, secrets management, and key rotation.
• Produce technical compliance evidence and support PCI DSS, ISO/IEC 27001:2022, internal audit, and external audit activities.
• Perform third-party and vendor security assessments to identify and mitigate infrastructure-related risks.
• Implement and maintain infrastructure monitoring, logging, audit trails, and security observability capabilities.
• Respond to infrastructure security incidents, vulnerabilities, and escalations as part of the on‑call rotation.
• Partner with development teams to improve security by design and shift security controls earlier into the software development lifecycle.
• Continuously evaluate emerging threats, technologies, and industry best practices to strengthen the organization’s security posture.

Qualifications

• Bachelor's degree (S1) in Computer Science, Information Systems, Informatics Engineering, Computer Engineering, Electrical Engineering, Telecommunications, or related technical disciplines.
• 3–5 years of experience in Infrastructure Security, Cloud Security, Security Engineering, Security Architecture, Platform Security, DevSecOps, or related fields.
• Proven hands‑on experience managing and securing production infrastructure environments.
• Experience supporting engineering teams through shared platform and security services.
• Fluent in Bahasa Indonesia with working proficiency in English for technical documentation, cloud advisories, audit frameworks, and vendor communications.
• Required Technical Skills: AWS, GCP, Microsoft Azure, Linux OS, Python & Golang.
• Preferred Technical Skills: Kubernetes, IaC, Identity & Access Management.

Why You’ll Love Working Here

At our company, cybersecurity is not a gatekeeper function, it's a business enabler. You'll work directly with engineering teams to protect revenue, customer trust, payment operations, and platform availability while helping the business scale securely. If you're passionate about cloud security, automation, infrastructure engineering, and solving complex challenges in a fast-moving e-commerce environment, we'd love to hear from you.