DevSecOps Lead: Architect Secure CI/CD Pipelines

Ajaib Group; Jakarta Pusat; On-site; IDR 300,000,000 - 600,000,000; Full time

Job summary

Ajaib Group in Indonesia is seeking a DevSecOps Engineer to bridge development, operations, and information security across our SDLC. You will embed SAST, DAST, and SCA into modern CI/CD pipelines, automating security gates and enabling rapid, secure software delivery.

You will work with Checkmarx, Semgrep, Snyk, and Burp Suite Pro, while advancing our cloud-native infrastructure with Docker, Kubernetes, and Terraform.

Qualifications

• 4+ years in DevOps, software engineering, or application security with 2+ years in DevSecOps.
• Proficient with SAST/DAST/SCA tools: Checkmarx, Semgrep, SonarQube, Snyk, Burp Suite Pro.
• Extensive experience building automation in GitHub Actions, GitLab CI, Jenkins, or Bitbucket Pipelines.
• IaC and cloud-native infra, containerization (Docker/Kubernetes), secure deployments with Terraform.
• Able to read multiple languages (Python, Java, Go, Node.js).
• Certifications like CDP, CDEP, CSSLP are highly preferred.

Responsibilities

• Implement security automation across CI/CD pipelines to shift left in SDLC.
• Configure and optimize AppSec platforms to minimize false positives and alert noise.
• Set up automated and targeted DAST tests using Burp Suite Pro.
• Triage vulnerabilities and provide remediation guidance to engineering teams.
• Monitor open-source components for SCA risks and license compliance.
• Establish automated gate-keeping thresholds based on security policies.

Skills

DevSecOps

CI/CD automation

Security testing

Cloud security

SRE practices

Education

CDP (Certified DevSecOps)

CDEP (Practical DevSecOps)

CSSLP

Tools

Checkmarx

Semgrep

SonarQube

Snyk

Burp Suite Pro

GitHub Actions

GitLab CI

Jenkins

Bitbucket Pipelines

Docker

Kubernetes

Terraform

Job description

Ajaib Group in Indonesia is seeking a DevSecOps Engineer to bridge development, operations, and information security across our SDLC. You will embed SAST, DAST, and SCA into modern CI/CD pipelines, automating security gates and enabling rapid, secure software delivery.

You will work with Checkmarx, Semgrep, Snyk, and Burp Suite Pro, while advancing our cloud-native infrastructure with Docker, Kubernetes, and Terraform.