Lead Application Security Engineer - FinTech

Ajaib Group; Jakarta Pusat; On-site; IDR 600,000,000 - 900,000,000; Full time

Job summary

Ajaib Group is seeking an Application Security Engineer/Lead to safeguard our digital financial services, mobile platforms, and crypto systems. Reporting to the Head of Security, you will champion SSDLC and scale threat modeling across engineering teams.

You will align defense with OWASP, oversee CREST-aligned testing, and build a Security Champions network. 8+ years in security with 3+ in application security in fintech or e-commerce, plus strong dev and cloud skills, are required.

Qualifications

• 8+ years of information security experience; at least 3+ years leading application security or product security in fintech/digital banking/e-commerce.
• Strong development background (Java, Python, Go, Node.js) and cloud-native architectures (AWS/GCP, Kubernetes, Docker).
• Deep knowledge of mobile app security (reversing, certificate pinning, secure storage).
• Experience with OWASP Top 10, ASVS, SAMM; CREST-aligned testing preferred.
• Ability to articulate vulnerabilities as business risk to product teams and drive fixes.

Responsibilities

• Define and lead the AppSec program and secure coding across engineering teams.
• Standardize testing, code reviews, and vulnerability management around OWASP frameworks.
• Oversee SAST/DAST/ SCA tooling within CI/CD; triage findings and guide remediation.
• Lead threat modeling during early product design using STRIDE.
• Manage CREST-aligned external penetration testing and third-party engagements.
• Design and deliver secure coding training and build Security Champions network.

Skills

SSDLC practices

Threat modeling

OWASP standards

SAST/DAST/SCA

CI/CD security

Penetration testing

Cloud-native security

Kubernetes & Docker

Security communication

Tools

Chekmarx

Semgrep

Snyk

Burp Suite Pro

SonarQube

GitHub security tooling

GitLab security tooling

Bitbucket security tooling

Job description

Ajaib Group is seeking an Application Security Engineer/Lead to safeguard our digital financial services, mobile platforms, and crypto systems. Reporting to the Head of Security, you will champion SSDLC and scale threat modeling across engineering teams.

You will align defense with OWASP, oversee CREST-aligned testing, and build a Security Champions network. 8+ years in security with 3+ in application security in fintech or e-commerce, plus strong dev and cloud skills, are required.