Lead Application Security Engineer & DevSecOps Strategist

Macquarie Group; Indonesia; On-site; IDR 350,000,000 - 550,000,000; Full time

Job summary

Macquarie Group seeks an experienced security engineer to lead application security across the software development lifecycle in Indonesia. You will assess risks, perform threat modelling, and conduct secure code reviews.

The role requires hands-on expertise with SAST, SCA, container and IaC security, API security, DAST, and RASP, plus practical DevSecOps, CI/CD, and automation experience.

Qualifications

• 8+ years in application security spanning SDLC and threat modelling/secure code review.
• Familiar with SAST, SCA, container security, IaC security, API security, DAST, and RASP.
• Experience with DevSecOps, CI/CD, automation, and secure software development.

Skills

Application security

Threat modelling

Secure code review

SAST

SCA

Container security

IaC security

API security

DAST

RASP

GitHub Advanced Security

DevSecOps

CI/CD

Automation

Java

Python

Go

Claude Code

GitHub Copilot

Tools

GitHub Copilot

Job description

Macquarie Group seeks an experienced security engineer to lead application security across the software development lifecycle in Indonesia. You will assess risks, perform threat modelling, and conduct secure code reviews.

The role requires hands-on expertise with SAST, SCA, container and IaC security, API security, DAST, and RASP, plus practical DevSecOps, CI/CD, and automation experience.