Secure Development (IT Insurance)

PT Intrias Mandiri Sejati; Jakarta Selatan; On-site; IDR 91,400,000 - 109,480,000; Full time

Benefits offered by this job

Basic salary up to 9 mio

Meal allowance

Transportation allowance

Cellphone allowance

BPJS

Job summary

PT Intrias Mandiri Sejati, an insurance company based in South Jakarta, is seeking a DevSecOps professional to ensure security across development projects. The role focuses on integrating security into the SDLC, performing secure code reviews, and collaborating with cross-functional teams.

The candidate should have a solid background in Java/.NET/Python/JavaScript security, familiarity with SAST/DAST/SCA, and knowledge of OAuth 2.0 and JWT for API protection.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or equivalent field.
• Minimum 1 year of experience in Software Development, DevSecOps, or Application Security.
• Strong understanding of Secure SDLC and OWASP Top 10.
• Ability to perform secure code reviews for Java, .NET, Python, or JavaScript.
• Familiarity with SAST, DAST, and SCA.
• Ability to read source code and identify security vulnerabilities.
• Understanding of API Security concepts (OAuth 2.0, JWT).
• Familiarity with Git, CI/CD pipelines, and DevSecOps practices.
• Strong communication with developers and stakeholders.
• Certifications like CompTIA Security+, CSSLP are advantageous.

Responsibilities

• Ensure development projects meet security requirements and standards.
• Conduct security reviews before production deployment.
• Identify security requirements from data classification and risk assessments.
• Define mandatory security controls within applications.
• Collaborate with analysts, architects, and developers to incorporate security into deliverables.
• Ensure Secure Coding Standards throughout the SDLC.
• Identify insecure coding practices and vulnerabilities in source code.
• Provide remediation guidance to development teams.
• Coordinate with Red Team for application security testing during development and pre-production.

Skills

Software Development

DevSecOps

Secure SDLC

OWASP Top 10

Secure code reviews

Java/.NET/Python/JS

SAST/DAST/SCA

API Security (OAuth 2.0, JWT)

Git, CI/CD

Communication skills

Security certifications (advantage)

Education

Bachelor's degree in IT/CS

Tools

Git

CI/CD pipelines

SAST

DAST

SCA

Job description

WE ARE #HIRING – Secure Development

Industry: Insurance Company

Placement: Kuningan, South Jakarta

Qualification :

1. Bachelor's degree in Information Technology, Computer Science, or an equivalent field.
2. Minimum 1 year of experience in Software Development, DevSecOps, or Application Security.
3. Strong understanding of Secure Software Development Lifecycle (Secure SDLC) and OWASP Top 10.
4. Ability to perform secure code reviews for applications developed in Java, .NET, Python, or JavaScript.
5. Familiarity with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
6. Ability to read source code and identify application security vulnerabilities.
7. Understanding of API Security concepts and authentication mechanisms such as OAuth 2.0 and JSON Web Tokens (JWT).
8. Familiarity with Git, CI/CD pipelines, and DevSecOps practices.
9. Strong communication skills with developers and business stakeholders.
10. Professional certifications such as CompTIA Security+, Certified in Cybersecurity (CC), CSSLP, or equivalent certifications are considered an advantage.

Jobdesk :

1. Ensure that all development projects comply with established security requirements and standards.
2. Conduct security reviews before applications are deployed to the production environment.
3. Identify security requirements based on data classification and business risk assessments.
4. Define mandatory security controls that must be implemented within applications.
5. Collaborate with Business Analysts, Solution Architects, and Developers to ensure security requirements are properly incorporated into project deliverables.
6. Ensure compliance with Secure Coding Standards throughout the software development lifecycle.
7. Identify insecure coding practices and security vulnerabilities within application source code.
8. Provide remediation recommendations and security guidance to development teams.
9. Coordinate with the Red Team to conduct application security testing during the development and pre-production phases.

Benefit :

• Basic salary up to 9 mio
• Meal allowance
• Trasnportation allowance
• Cellphone allowance
• BPJS