Lead Application Security Engineer – FinTech

Ajaib Group; Jakarta Pusat; On-site; IDR 750,000,000 - 1,350,000,000; Full time

Job summary

Ajaib Group in Jakarta is seeking an experienced Application Security Engineer/Lead to safeguard our digital financial services, mobile apps and crypto systems. You will champion SSDLC, scale threat modeling, and lead security testing programs.

Reporting to the Head of Security, you will align defense with OWASP, oversee CREST-aligned testing, and drive developer enablement through security training and a network of security champions across engineering teams.

Qualifications

• 8+ years in information security with 3+ years leading AppSec in fintech/digital banking.
• Strong coding background (Java/Python/Go/Node.js) and cloud-native architectures.
• Deep knowledge of OWASP, threat modeling, and secure coding practices.

Responsibilities

• Define and lead the AppSec program and secure coding across engineering teams.
• Standardize testing, code reviews, and vulnerability management around OWASP and SAMM.
• Oversee SAST/DAST/IAST/SCA in CI/CD and automate security testing in workflows.
• Lead threat modeling exercises and secure architecture reviews.
• Manage CREST-aligned external penetration testing and remediation tracking.
• Enable developers with ongoing secure coding training and security champions.

Skills

AppSec leadership

SSDLC

Java

Python

Cloud-native

Kubernetes

Docker

Mobile security

SAST/DAST/SCA

OWASP standards

CREST testing

Security certifications

Tools

Chekmarx

Semgrep

Snyk

Burp Suite Pro

SonarQube

GitHub

GitLab

Bitbucket

Job description

Ajaib Group in Jakarta is seeking an experienced Application Security Engineer/Lead to safeguard our digital financial services, mobile apps and crypto systems. You will champion SSDLC, scale threat modeling, and lead security testing programs.

Reporting to the Head of Security, you will align defense with OWASP, oversee CREST-aligned testing, and drive developer enablement through security training and a network of security champions across engineering teams.