Senior Blue Team Security Engineer – Detection & Automation

Blibli; Jakarta Pusat; On-site; IDR 280,000,000 - 420,000,000; Full time

Job summary

Blibli is seeking a Senior Cybersecurity Engineer to strengthen detection and response across applications, infrastructure, cloud, and critical systems. You will build and tune security detection, automate security operations, investigate threats, and collaborate with Engineering and SRE teams to raise our security posture.

This is an engineering-focused cybersecurity role focused on proactive defense, not Tier-1 SOC monitoring.

Qualifications

• 2–3+ years hands-on cybersecurity experience in Blue Team, Detection Engineering, Security Operations, Security Automation, or related areas.
• Strong experience with SIEM platforms such as Splunk, Elastic, Wazuh, or Sentinel, including building and tuning detection content.
• Proficiency in Python or Go for developing maintainable security automation and internal tooling.
• Strong fundamentals in Linux, networking, cloud security, APIs, and security monitoring.
• Familiarity with MITRE ATT&CK, Sigma, SOAR, incident response, threat intelligence, and attack simulation methodologies.
• Hands-on experience with enterprise perimeter security technologies, including Cloudflare and firewall management.
• Willing to participate in an on-call rotation as an escalation tier.

Responsibilities

• Build, tune, and continuously improve security detection and monitoring capabilities across our technology ecosystem.
• Develop security automation and tooling to accelerate investigation, containment, evidence collection, and incident response.
• Investigate security incidents, identify root causes, and translate findings into sustainable prevention and detection improvements.
• Conduct security assessments across cloud, infrastructure, applications, and perimeter environments.
• Analyze emerging threats and abuse patterns, including account takeover, credential stuffing, payment abuse, bots, scraping, and API attacks.
• Partner with Engineering and SRE teams to improve logging, security controls, system hardening, and remediation.
• Support threat emulation, attack simulation, incident response, and continuous security improvement initiatives.

Skills

Cybersecurity

SIEM

Python/Go

Linux

Cloud security

Threat intelligence

MITRE ATT&CK

SOAR

Firewall management

Incident response

Tools

Splunk

Elastic

Wazuh

Sentinel

Cloudflare

Job description

Blibli is seeking a Senior Cybersecurity Engineer to strengthen detection and response across applications, infrastructure, cloud, and critical systems. You will build and tune security detection, automate security operations, investigate threats, and collaborate with Engineering and SRE teams to raise our security posture.

This is an engineering-focused cybersecurity role focused on proactive defense, not Tier-1 SOC monitoring.