Senior Cybersecurity Engineer (Blue Team)

Blibli; Jakarta Pusat; On-site; IDR 240,000,000 - 480,000,000; Full time

Job summary

Blibli is seeking a Senior Cybersecurity Engineer to strengthen detection and response across applications, cloud, and infrastructure. You’ll build and tune security detection, automate operations, and investigate threats alongside Engineering and SRE teams.

This is an engineering-focused security role, not a Tier-1 SOC position. You will lead security instrumentation, respond to incidents, and contribute to a safer commerce environment while advancing our overall security posture and

Qualifications

• 2–3+ years of hands-on cybersecurity experience in blue team, detection engineering, security operations, or related areas.
• Strong experience with SIEM platforms such as Splunk, Elastic, Wazuh, or Sentinel, including building and tuning detection content.
• Proficiency in Python or Go for developing security automation and internal tooling.

Responsibilities

• Build, tune, and improve security detection and monitoring across our technology ecosystem.
• Develop security automation and tooling to accelerate investigation, containment, evidence collection, and incident response.
• Investigate security incidents and translate findings into prevention and detection improvements.
• Conduct security assessments across cloud, infrastructure, applications, and perimeter environments.
• Analyze emerging threats and abuse patterns including account takeover, credential stuffing, botting, and API attacks.
• Partner with Engineering and SRE to improve logging, controls, hardening, and remediation.
• Support threat emulation, incident response, and continuous security improvement initiatives.

Skills

Security operations

SIEM expertise

Python/Go

Cloud security

Networking fundamentals

Threat intelligence

Incident response

Communication

On-call readiness

Tools

Splunk

Elastic

Wazuh

Sentinel

Cloudflare

Firewall management

Job description

About The Role

Blibli is transforming into a future-ready digital ecosystem where cybersecurity is fundamental to protecting our customers, transactions, and business growth. As our platform scales, we need strong security capabilities that can proactively identify threats, automate response, and strengthen our defenses against evolving cyber risks.

As a Senior Cybersecurity Engineer, you will take a hands‑on role in strengthening our detection and response capabilities across applications, infrastructure, cloud, and critical business systems. You will build and improve security detection, automate security operations, investigate threats, and work closely with Engineering and SRE teams to continuously improve our security posture. This is an engineering-focused cybersecurity role- not a Tier-1 SOC monitoring position.

What You’ll Do

• Build, tune, and continuously improve security detection and monitoring capabilities across our technology ecosystem.
• Develop security automation and tooling to accelerate investigation, containment, evidence collection, and incident response.
• Investigate security incidents, identify root causes, and translate findings into sustainable prevention and detection improvements.
• Conduct security assessments across cloud, infrastructure, applications, and perimeter environments.
• Analyze emerging threats and abuse patterns, including account takeover, credential stuffing, payment abuse, bots, scraping, and API attacks.
• Partner with Engineering and SRE teams to improve logging, security controls, system hardening, and remediation.
• Support threat emulation, attack simulation, incident response, and continuous security improvement initiatives.

What You’ll Bring to the Team

• 2-3+ years of hands‑on cybersecurity experience in Blue Team, Detection Engineering, Security Operations, Security Automation, or related areas.
• Strong experience with SIEM platforms such as Splunk, Elastic, Wazuh, or Sentinel, including building and tuning detection content.
• Proficiency in Python or Go for developing maintainable security automation and internal tooling.
• Strong fundamentals in Linux, networking, cloud security, APIs, and security monitoring.
• Familiarity with MITRE ATT&CK, Sigma, SOAR, incident response, threat intelligence, and attack simulation methodologies.
• Hands‑on experience with enterprise perimeter security technologies, including Cloudflare and firewall management.
• Strong problem‑solving and communication skills, with the ability to translate technical findings into clear risks and remediation recommendations.
• Willing to participate in an on‑call rotation as an escalation tier.

Why You’ll Love Working Here

Cybersecurity at Blibli is about engineering solutions, not simply responding to alerts. You’ll have the opportunity to build security capabilities, automate how we respond to threats, and directly protect critical commerce and payment experiences. Join us in building a safer and more resilient digital ecosystem as we continue growth - transforming together.