Secure Development Engineer – App Security & DevSecOps

PT Intrias Mandiri Sejati; Jakarta Selatan; On-site; IDR 91,400,000 - 109,480,000; Full time

Benefits offered by this job

Basic salary up to 9 mio

Meal allowance

Transportation allowance

Cellphone allowance

BPJS

Job summary

PT Intrias Mandiri Sejati, an insurance company based in South Jakarta, is seeking a DevSecOps professional to ensure security across development projects. The role focuses on integrating security into the SDLC, performing secure code reviews, and collaborating with cross-functional teams.

The candidate should have a solid background in Java/.NET/Python/JavaScript security, familiarity with SAST/DAST/SCA, and knowledge of OAuth 2.0 and JWT for API protection.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or equivalent field.
• Minimum 1 year of experience in Software Development, DevSecOps, or Application Security.
• Strong understanding of Secure SDLC and OWASP Top 10.
• Ability to perform secure code reviews for Java, .NET, Python, or JavaScript.
• Familiarity with SAST, DAST, and SCA.
• Ability to read source code and identify security vulnerabilities.
• Understanding of API Security concepts (OAuth 2.0, JWT).
• Familiarity with Git, CI/CD pipelines, and DevSecOps practices.
• Strong communication with developers and stakeholders.
• Certifications like CompTIA Security+, CSSLP are advantageous.

Responsibilities

• Ensure development projects meet security requirements and standards.
• Conduct security reviews before production deployment.
• Identify security requirements from data classification and risk assessments.
• Define mandatory security controls within applications.
• Collaborate with analysts, architects, and developers to incorporate security into deliverables.
• Ensure Secure Coding Standards throughout the SDLC.
• Identify insecure coding practices and vulnerabilities in source code.
• Provide remediation guidance to development teams.
• Coordinate with Red Team for application security testing during development and pre-production.

Skills

Software Development

DevSecOps

Secure SDLC

OWASP Top 10

Secure code reviews

Java/.NET/Python/JS

SAST/DAST/SCA

API Security (OAuth 2.0, JWT)

Git, CI/CD

Communication skills

Security certifications (advantage)

Education

Bachelor's degree in IT/CS

Tools

Git

CI/CD pipelines

SAST

DAST

SCA

Job description

PT Intrias Mandiri Sejati, an insurance company based in South Jakarta, is seeking a DevSecOps professional to ensure security across development projects. The role focuses on integrating security into the SDLC, performing secure code reviews, and collaborating with cross-functional teams.

The candidate should have a solid background in Java/.NET/Python/JavaScript security, familiarity with SAST/DAST/SCA, and knowledge of OAuth 2.0 and JWT for API protection.