Do you want to shape the next generation of security-minded engineers in Indonesia? The Apple Developer Institute for DevOps, a partnership between Apple and S-Quantum Engine (SQE), is looking for a Cybersecurity Mentor.
You will guide about 30 learners to secure the systems they build: Linux servers, CI/CD pipelines, Terraform, Kubernetes, and AI applications on AWS. You will also lead our Cybersecurity Specialization track.
If you love security and love to help engineers grow, join us in BSD, Tangerang Indonesia.
The Role
- Lead security mentoring for a cohort of about 30 learners.
- Strategize the security curriculum across all program challenges: Linux hardening, CI/CD, Infrastructure as Code, Kubernetes, and AI application security.
- Lead the Cybersecurity Specialization track, covering threat modeling, supply-chain security, defense in depth, detection and response, and security assessment.
- Plan and run security activities, Blue Team vs Red Team battles, and CTF-style exercises.
- Formulate security success criteria and review standards for each challenge.
- Evaluate learner systems, architecture diagrams, and pull requests for security gaps, and give clear, actionable feedback.
- Plan and control safe, authorized lab environments for offensive security practice.
- Recommend security controls for Institute AWS accounts, IAM Identity Center, and learner access.
- Synergize with DevOps Mentors, the Pedagogy team, and capstone host companies to align security learning with industry needs.
- Mentor capstone learners on security work at banks, insurers, and fintechs under OJK, PCI DSS, and ISO 27001.
- Negotiate partnerships with security firms and industry speakers for workshops and guest sessions.
- Use AI-assisted tools thoughtfully for curriculum design, lab building, and feedback, without compromising quality or security.
- Evaluate and refresh course material against OWASP, MITRE ATT&CK, CIS Benchmarks, NIST, and SLSA.
The Requirements
- Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent practical experience).
- 5+ years of professional experience in security engineering, DevSecOps, or cloud security.
- Hands-on Cloud Security experience: IAM, VPC, KMS, Secrets Manager, CloudTrail, GuardDuty, and Security Hub.
- Experience with pipeline security, including SAST, SCA, DAST, secret scanning, and IaC scanning.
- Strong command of OWASP Top 10, MITRE ATT&CK, CIS Benchmarks, and NIST frameworks.
- Experience in incident response, detection engineering, or security operations.
- Experience in banking, fintech, or insurance under OJK, PCI DSS, or ISO 27001 is a strong advantage.
- Penetration testing or red team experience is an advantage.
- Familiarity with AI application security (OWASP Top 10 for LLM Applications, prompt injection, guardrails) is an advantage.
- Familiarity with AI-assisted tools such as Claude Code, GitHub Copilot, or similar, with the judgment to review and test generated output.
- Certifications such as OSCP, CKS, AWS Certified Security – Specialty, CISSP, or CompTIA Security+ are an advantage. A strong portfolio or CTF record is equally valued.
- Strong ethics and a clear understanding of authorized security testing.
- Excellent communication in English and Bahasa Indonesia, with the ability to explain risk to engineers and executives.