Cybersecurity Engineer (Infrastructure Security)

PT Global Digital Niaga; Kemayoran; On-site; IDR 300,000,000 - 600,000,000; Full time

Job summary

Blibli is seeking a Cybersecurity Engineer (Infrastructure Security) to secure and enable the e-commerce platform by designing, implementing, and improving cloud and infrastructure security controls. The role focuses on PCI DSS and ISO 27001 compliance, security in engineering processes, and rapid, secure product delivery.

You will work with AWS/GCP/Azure, implement security patterns, perform posture assessments, and drive security into development workflows.

Qualifications

• Bachelor's degree in computer science, information systems, or related technical disciplines.
• 3–5 years of experience in Infrastructure Security, Cloud Security, or related fields.
• Fluent in Bahasa Indonesia with working proficiency in English for technical documentation, cloud advisories, audit frameworks, and vendor communications.

Responsibilities

• Design, implement, and maintain cloud security architectures across AWS, GCP, or Azure environments.
• Develop and enforce secure infrastructure patterns, including least-privilege IAM, network segmentation, encryption, and audit logging.
• Perform cloud security posture assessments and remediate misconfigurations identified via CSPM tools.
• Conduct threat modeling exercises (e.g., STRIDE) for new products and platform changes.
• Implement CIS Benchmark-based hardening across Linux, Kubernetes, databases, containers, and cloud environments.
• Collaborate with Engineering, Platform, SRE, and Product teams to integrate security into CI/CD pipelines.
• Build and maintain security automation solutions using Python, Go, Bash, or similar.
• Develop IaC security controls for Terraform and CloudFormation.

Skills

AWS

GCP

Microsoft Azure

Linux OS

Python

Golang

Kubernetes

IaC

Identity & Access Management

Education

Bachelor's degree

Job description

Cybersecurity Engineer (Infrastructure Security)

Blibli is on a journey to become Indonesia’s #1 e-commerce platform — built on trust, innovation, and care. We’re creating better experiences for customers, merchants, brands, and sellers through technology, collaboration, and a deep commitment to quality. Here, every idea matters and every action helps us grow stronger together.

As a Cybersecurity Engineer (Infrastructure Security), you will play a critical role in securing and enabling our e-commerce platform by designing, implementing, and continuously improving cloud and infrastructure security controls. This role focuses on protecting customer trust, ensuring business continuity, supporting compliance requirements such as PCI DSS and ISO 27001, and embedding security into engineering processes so that teams can ship products quickly and securely without compromising risk management.

Blibli is on a journey to become Indonesia’s #1 e-commerce platform — built on trust, innovation, and care. We’re creating better experiences for customers, merchants, brands, and sellers through technology, collaboration, and a deep commitment to quality. Here, every idea matters and every action helps us grow stronger together.

As a Cybersecurity Engineer (Infrastructure Security), you will play a critical role in securing and enabling our e-commerce platform by designing, implementing, and continuously improving cloud and infrastructure security controls. This role focuses on protecting customer trust, ensuring business continuity, supporting compliance requirements such as PCI DSS and ISO 27001, and embedding security into engineering processes so that teams can ship products quickly and securely without compromising risk management.

What You'll Work on Together

• Design, implement, and maintain cloud security architectures across AWS, GCP, or Azure environments.
• Develop and enforce secure infrastructure patterns, including IAM least-privilege models, network segmentation, encryption, and audit logging.
• Perform cloud security posture assessments and remediate infrastructure misconfigurations identified through CSPM tools.
• Conduct threat modeling exercises (e.g., STRIDE) for new products, services, and major platform changes.
• Implement and maintain CIS Benchmark-based hardening standards across Linux servers, Kubernetes clusters, databases, containers, and cloud environments.
• Collaborate with Engineering, Platform, SRE, and Product teams to integrate security controls into CI/CD pipelines and infrastructure workflows.
• Build and maintain security automation solutions using Python, Go, Bash, or similar technologies.
• Develop Infrastructure-as-Code (IaC) security controls and policy-as-code implementations for Terraform and CloudFormation environments.
• Design and improve Kubernetes security controls, including RBAC, admission controls, network policies, image security, and workload protection.
• Support identity and access management initiatives, including SSO, SAML, OIDC, privileged access management, service accounts, secrets management, and key rotation.
• Produce technical compliance evidence and support PCI DSS, ISO/IEC 27001:2022, internal audit, and external audit activities.
• Perform third-party and vendor security assessments to identify and mitigate infrastructure-related risks.
• Implement and maintain infrastructure monitoring, logging, audit trails, and security observability capabilities.
• Respond to infrastructure security incidents, vulnerabilities, and escalations as part of the on-call rotation.
• Partner with development teams to improve security by design and shift security controls earlier into the software development lifecycle.
• Continuously evaluate emerging threats, technologies, and industry best practices to strengthen the organization's security posture.

Qualifications

• Bachelor's degree (S1) in Computer Science, Information Systems, Informatics Engineering, Computer Engineering, Electrical Engineering, Telecommunications, or related technical disciplines.
• 3–5 years of experience in Infrastructure Security, Cloud Security, Security Engineering, Security Architecture, Platform Security, DevSecOps, or related fields.
• Proven hands‑on experience managing and securing production infrastructure environments.
• Experience supporting engineering teams through shared platform and security services.
• Fluent in Bahasa Indonesia with working proficiency in English for technical documentation, cloud advisories, audit frameworks, and vendor communications.
• Required Technical Skills: AWS, GCP, Microsoft Azure, Linux OS, Python & Golang.
• Preferred Technical Skills: Kubernetes, IaC, Identity & Access Management.

Why You’ll Love Working Here

At our company, cybersecurity is not a gatekeeper function, it's a business enabler. You'll work directly with engineering teams to protect revenue, customer trust, payment operations, and platform availability while helping the business scale securely. If you're passionate about cloud security, automation, infrastructure engineering, and solving complex challenges in a fast-moving e-commerce environment, we'd love to hear from you.

Blibli.com is an e-commerce platform built upon a big dream: to lead Indonesians to enter a new digital lifestyle and give only the best shopping experience for a better life. We are committed to conduct our business with customer‑centric minded, striving to deliver the best features and services to satisfy our customers. We aim for an exciting challenge to become the number 1 e-commerce platform in Indonesia by providing the best customer‑centric experience for both buyers and sellers. Blibli.com is created by Indonesians, in Indonesia, and for Indonesians; we’re here as an inspiration to channel and empower the Indonesian people to engage and socialize in commercial activities.

Blibli.com is an e-commerce platform built upon a big dream: to lead Indonesians to enter a new digital lifestyle and give only the best shopping experience for a better life. We are committed to conduct our business with customer‑centric minded, striving to deliver the best features and services to satisfy our customers. We aim for an exciting challenge to become the number 1 e-commerce platform in Indonesia by providing the best customer‑centric experience for both buyers and sellers. Blibli.com is created by Indonesians, in Indonesia, and for Indonesians; we’re here as an inspiration to channel and empower the Indonesian people to engage and socialize in commercial activities.