DevSecOps Security Engineer — CI/CD & Supply Chain

Bibit.id; Jakarta Pusat; On-site; IDR 350,000,000 - 650,000,000; Full time

Job summary

Bibit.id is seeking a Core Security Engineer to strengthen security across development and delivery processes. You will embed security into the lifecycle, automate controls, and ensure secure-by-design systems in Jakarta. Collaborate with Engineering and Infrastructure teams to improve tooling and remediation workflows.

The role emphasizes SSDLC maturity, secure CI/CD, and software supply chain protections, with a focus on automation and architectural guidance across projects.

Qualifications

• 3+ years of experience in DevSecOps, cloud security, or related field.
• Strong SSDLC and DevSecOps practices.
• Hands-on CI/CD security in GitLab CI/CD.
• Familiarity with SAST/DAST/SCA and vulnerability management tools.
• Experience with Docker security and IaC security (Terraform).
• Good understanding of software supply chain security.
• Understanding OWASP DevSecOps Maturity Model (DSOMM).
• Strong analytical and problem-solving skills and collaboration.
• Comfortable in fast-paced environments balancing security and velocity.

Responsibilities

• CI/CD Security: implement and manage security controls across pipelines with code and dependency scanning.
• Software Supply Chain Security: strengthen security of dependencies, artifacts, and release workflows.
• Infrastructure as Code Security: apply security controls across IaC deployments.
• Container Security: manage container image scanning and vulnerability management.
• Security Findings & Vulnerability Management: triage, prioritize risks, drive remediation.
• Security Automation & Continuous Improvement: automate security processes across SDLC.
• Security Architecture: conduct security reviews and guiding designs for new initiatives.

Skills

DevSecOps

Cloud Security

SSDLC

CI/CD Security

Docker security

Terraform

SAST/DAST/SCA

Vulnerability management

Security automation

Threat modeling

Tools

Snyk

Semgrep

Trivy

Job description

Bibit.id is seeking a Core Security Engineer to strengthen security across development and delivery processes. You will embed security into the lifecycle, automate controls, and ensure secure-by-design systems in Jakarta. Collaborate with Engineering and Infrastructure teams to improve tooling and remediation workflows.

The role emphasizes SSDLC maturity, secure CI/CD, and software supply chain protections, with a focus on automation and architectural guidance across projects.