Remote DevSecOps Engineer: Secure CI/CD & Cloud Apps

Ajaib; Indonesia; Remote; IDR 420,000,000 - 660,000,000; Full time

Benefits offered by this job

Performance Bonus

Private Insurance

Paid Time Off

Learning & Development

Hybrid Work Arrangement

Career Growth

Employee Perks

Collaborative & High-Ownership Culture

Job summary

Ajaib is seeking a DevSecOps Engineer to bridge development, operations and security. You will embed SAST, DAST, and SCA into modern CI/CD pipelines, enabling secure software delivery.

You’ll manage Checkmarx, Semgrep, Snyk, and SonarQube to minimize false positives while driving security across the SDLC. You will configure automated dynamic scanners, perform targeted testing with Burp Suite Pro, and collaborate with engineering teams to remediate vulnerabilities.

Qualifications

• 4+ years in DevOps, software engineering, or application security with at least 2+ years in DevSecOps.
• Deep proficiency with SAST, DAST, and SCA tools (Checkmarx, Semgrep, SonarQube, Snyk, Burp Suite Pro).
• CI/CD experience in GitHub Actions, GitLab CI, Jenkins, or Bitbucket Pipelines.
• IaC and cloud-native infra, Docker, Kubernetes, Terraform.
• Ability to read code snippets in Python, Java, Go, and Node.js.
• Certifications such as CDP, CDEP, CSSLP are highly preferred.

Responsibilities

• Pipeline Security Automation: integrate static, dynamic, and SCA tools into CI/CD pipelines.
• Tooling Optimization: configure AppSec platforms to minimize false positives.
• Automated & Manual DAST: configure dynamic scanners and Burp Suite Pro for API/security testing.
• Vulnerability Remediation & Triaging: triage code vulnerabilities and provide remediation guidance.
• Open Source Security (SCA): monitor dependencies and license compliance with Snyk.
• Policy Enforcement: define automated gatekeeping thresholds for vulnerabilities.

Skills

CI/CD pipelines

SAST/DAST/SCA

AppSec tooling

Checkmarx

Semgrep

Snyk

SonarQube

Burp Suite Pro

Docker & Kubernetes

Terraform

Programming languages (Python/Java/Go/

GitHub Actions

Tools

Checkmarx

Semgrep

Snyk

SonarQube

Burp Suite Pro

Job description

Ajaib is seeking a DevSecOps Engineer to bridge development, operations and security. You will embed SAST, DAST, and SCA into modern CI/CD pipelines, enabling secure software delivery.

You’ll manage Checkmarx, Semgrep, Snyk, and SonarQube to minimize false positives while driving security across the SDLC. You will configure automated dynamic scanners, perform targeted testing with Burp Suite Pro, and collaborate with engineering teams to remediate vulnerabilities.