DevSecOps

Dkatalis; Jakarta Pusat; On-site; IDR 279,000,000 - 357,120,000; Full time

Job summary

DKatalis is seeking a DevSecOps to embed security across SDLC and operations. You will lead secure coding, vulnerability management, and secure infrastructure design while collaborating with development, security, and IT teams to maintain resilient systems.

The role requires 3+ years in DevSecOps, hands-on cloud security, and proficiency in scripting. You will shape secure practices, contribute to incident response, and mentor peers in a fast-pacedFinTech environment.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field; Master’s is a plus.
• 3+ years in DevSecOps or similar role; hands-on security in SDLC/DevOps.
• Strong secure coding, vulnerability management, and secure infra design.
• Familiarity with OWASP, NIST, CIS benchmarks.
• Experience with cloud platforms and security services.
• CI/CD, configuration management (Ansible, Puppet), and container tech.
• Scripting in Python, Bash, or PowerShell.

Responsibilities

• Develop and implement a DevSecOps strategy across SDLC and operations.
• Lead secure coding practices, code reviews, vulnerability scanning, and pen testing.
• Integrate security controls into CI/CD pipelines.
• Design secure infrastructure and cloud architecture, IAM, data storage.
• Identify risks and implement proactive mitigations.
• Manage security incident response and root-cause analysis.
• Report on security metrics and drive continuous improvement.
• Stay updated on security tech and best practices.
• Mentor team members to foster security culture.

Skills

DevSecOps

Cloud security

CI/CD

Vulnerability management

Secure coding

Scripting

Education

Bachelor's degree in CS/InfoSec

Tools

AWS

Azure

GCP

Ansible

Puppet

Docker

Kubernetes

Job description

About DKatalis

DKatalis is a financial technology company with multiple offices in the APAC region. In our quest to build a better financial world, one of our key goals is to create an ecosystem linked financial services business.

DKatalis is built and backed by experienced and successful entrepreneurs, bankers, and investors in Singapore and Indonesia who have more than 30 years of financial domain experience and are from top-tier schools like Stanford, Cambridge London Business School, JNU with more than 30 years of building financial services/banking experience from Bank BTPN, Danamon, Citibank, McKinsey & Co, Northstar, Farallon Capital, and HSBC.

We’re looking for a DevSecOps to join our high performing team. If you’re looking to be a part of a team who tackle real-world problems, DKatalis might just be the place for you! Work alongside world-class talents and join us as we use technology to make a change in the financial world.

Position Overview:

The DevSecOps will play a crucial role in implementing and maintaining a robust DevSecOps framework within our organization. This individual will be responsible for leading the integration of security practices into our development, operations, and infrastructure processes, ensuring the confidentiality, integrity, and availability of our systems and data. The DevSecOps will work closely with cross-functional teams, including development, operations, and security, to ensure a collaborative and efficient approach to security.

Responsibilities:

1. Develop and implement a comprehensive DevSecOps strategy to embed security practices throughout the software development lifecycle (SDLC) and operational processes.
2. Lead the establishment and maintenance of secure coding practices, including code review processes, vulnerability scanning, and penetration testing.
3. Collaborate with development teams to integrate security controls, such as static code analysis, into the continuous integration and deployment (CI/CD) pipelines.
4. Design and implement secure infrastructure and cloud architecture, including network security, identity and access management (IAM), and secure data storage.
5. Identify and evaluate potential security risks and vulnerabilities, and develop proactive strategies to mitigate them.
6. Manage security incident response processes, ensuring timely detection, investigation, and resolution of security incidents.
7. Monitor and report on key security metrics and indicators to assess the effectiveness of security controls and identify areas for improvement.
8. Stay up-to-date with the latest security technologies, trends, and best practices, and make recommendations for their adoption.
9. Provide guidance and mentorship to team members, fostering a culture of security awareness and knowledge sharing.

Qualifications:

1. Bachelor’s degree in Computer Science, Information Security, or a related field. A master’s degree is a plus.
2. Proven experience (3+ years) working in a DevSecOps or similar role, with hands‑on experience in implementing security practices in software development and operations.
3. Strong understanding of secure coding practices, vulnerability management, and secure infrastructure design.
4. In‑depth knowledge of industry standards and frameworks, such as OWASP, NIST, and CIS benchmark.
5. Experience with cloud platforms (e.g., AWS, Azure, GCP) and related security services.
6. Familiarity with CI/CD pipelines, configuration management tools (e.g., Ansible, Puppet), and containerization technologies (e.g., Docker, Kubernetes).
7. Hands‑on experience with on‑prem DevSecOps environments and tools will be advantageous.
8. Proficiency in scripting and automation using languages such as Python, Bash, or PowerShell