Junior DevSecOps Engineer (Project Based)

Hitopia.id; Jakarta Pusat; On-site; IDR 300,000,000 - 600,000,000; Full time

Job summary

Hitopia.id is seeking a DevOps/DevSecOps professional to strengthen cloud security, automate pipelines, and enforce secure coding practices across environments. You will implement SAST/DAST, container scanning, and security gates while collaborating with engineering teams to remediate findings.

Experience with Docker and Kubernetes is essential. The role emphasizes automation, troubleshooting, and secure design principles, with opportunities to contribute to security improvements and

Qualifications

• 2+ years in DevOps/DevSecOps roles with cloud security focus.
• Strong knowledge of AWS/GCP IAM best practices.
• Hands-on with CI/CD pipelines (GitLab CI/CD, Jenkins, or GitHub Actions).
• Experience implementing SAST, DAST, SCA, container scanning, and security gates.
• Familiarity with Docker, Kubernetes/EKS/GKE, Terraform, and IaC.
• Knowledge of OWASP Top 10, vulnerability management, and secure coding practices.
• Experience with security tools such as SonarQube, Trivy, Burp Suite, or equivalent.
• AWS or GCP certification is a plus.
• Strong troubleshooting, automation, and collaboration skills.

Responsibilities

• Develop and enforce secure DevOps practices across pipelines.
• Implement security gates and automated scanning in CI/CD.
• Collaborate with engineering and security teams to remediate findings.
• Maintain IaC and cloud security controls across environments.

Skills

AWS/GCP security

IAM best practices

CI/CD pipelines

SAST/DAST/SCA

Container security

Docker

Kubernetes/EKS/GKE

Terraform

Infrastructure as Code

OWASP Top 10

Vulnerability management

Security tooling

Tools

GitLab CI/CD

Jenkins

GitHub Actions

SonarQube

Trivy

Burp Suite

Docker

Kubernetes

Terraform

Job description

• Minimum 2 years of experience in DevOps, Cloud Engineering, or DevSecOps.
• Strong knowledge of AWS/GCP cloud security and IAM best practices.
• Hands-on experience with CI/CD pipelines (GitLab CI/CD, Jenkins, or GitHub Actions).
• Experience implementing SAST, DAST, SCA, container scanning, and security gates.
• Familiarity with Docker, Kubernetes/EKS/GKE, Terraform, and Infrastructure as Code (IaC).
• Knowledge of OWASP Top 10, vulnerability management, and secure coding practices.
• Experience with security tools such as SonarQube, Trivy, Burp Suite, or equivalent.
• AWS or GCP certification is a plus.
• Strong troubleshooting, automation, and collaboration skills.