Fintech Application Security Lead — Drive Crypto & Cloud Security

AiR; Jakarta Pusat; On-site; IDR 550,000,000 - 900,000,000; Full time

Job summary

AiR is seeking an experienced Application Security leader to define and drive our enterprise AppSec program in Jakarta. You will secure our fintech platforms and crypto systems, embedding secure coding and threat modeling across development teams.

You will oversee vulnerability management, coordinate external penetration testing, and mentor engineers to raise security literacy while translating risk into business context.

Qualifications

• 8+ years in information security, with 3+ leading AppSec in fintech.
• Deep understanding of cloud-native architectures (AWS/GCP).
• Hands-on experience with SAST, DAST, and SCA tools.
• Proficiency in Python, Java, or Go development.
• Experience managing CREST-aligned penetration tests.
• Ability to translate technical risks into business impact.

Responsibilities

• Define and implement the enterprise AppSec strategy.
• Lead threat modeling and secure coding practices.
• Oversee vulnerability management and remediation.
• Manage external penetration testing and drive developer enablement.

Job description

AiR is seeking an experienced Application Security leader to define and drive our enterprise AppSec program in Jakarta. You will secure our fintech platforms and crypto systems, embedding secure coding and threat modeling across development teams.

You will oversee vulnerability management, coordinate external penetration testing, and mentor engineers to raise security literacy while translating risk into business context.