Senior Cybersecurity Engineer (Blue Team)

Blibli; Jakarta Pusat; On-site; IDR 280,000,000 - 420,000,000; Full time

Job summary

Blibli is seeking a Senior Cybersecurity Engineer to strengthen detection and response across applications, infrastructure, cloud, and critical systems. You will build and tune security detection, automate security operations, investigate threats, and collaborate with Engineering and SRE teams to raise our security posture.

This is an engineering-focused cybersecurity role focused on proactive defense, not Tier-1 SOC monitoring.

Qualifications

• 2–3+ years hands-on cybersecurity experience in Blue Team, Detection Engineering, Security Operations, Security Automation, or related areas.
• Strong experience with SIEM platforms such as Splunk, Elastic, Wazuh, or Sentinel, including building and tuning detection content.
• Proficiency in Python or Go for developing maintainable security automation and internal tooling.
• Strong fundamentals in Linux, networking, cloud security, APIs, and security monitoring.
• Familiarity with MITRE ATT&CK, Sigma, SOAR, incident response, threat intelligence, and attack simulation methodologies.
• Hands-on experience with enterprise perimeter security technologies, including Cloudflare and firewall management.
• Willing to participate in an on-call rotation as an escalation tier.

Responsibilities

• Build, tune, and continuously improve security detection and monitoring capabilities across our technology ecosystem.
• Develop security automation and tooling to accelerate investigation, containment, evidence collection, and incident response.
• Investigate security incidents, identify root causes, and translate findings into sustainable prevention and detection improvements.
• Conduct security assessments across cloud, infrastructure, applications, and perimeter environments.
• Analyze emerging threats and abuse patterns, including account takeover, credential stuffing, payment abuse, bots, scraping, and API attacks.
• Partner with Engineering and SRE teams to improve logging, security controls, system hardening, and remediation.
• Support threat emulation, attack simulation, incident response, and continuous security improvement initiatives.

Skills

Cybersecurity

SIEM

Python/Go

Linux

Cloud security

Threat intelligence

MITRE ATT&CK

SOAR

Firewall management

Incident response

Tools

Splunk

Elastic

Wazuh

Sentinel

Cloudflare

Job description

Technology Senior Cybersecurity Engineer (Blue Team) Sarana Jaya, Kota Jakarta Pusat, Dki Jakarta, Indonesia 1 - 3 Years

Job Description

About the Role

Blibli is transforming into a future-ready digital ecosystem where cybersecurity is fundamental to protecting our customers, transactions, and business growth. As our platform scales, we need strong security capabilities that can proactively identify threats, automate response, and strengthen our defenses against evolving cyber risks.

As a Senior Cybersecurity Engineer , you will take a hands-on role in strengthening our detection and response capabilities across applications, infrastructure, cloud, and critical business systems. You will build and improve security detection, automate security operations, investigate threats, and work closely with Engineering and SRE teams to continuously improve our security posture.

This is an engineering-focused cybersecurity role—not a Tier-1 SOC monitoring position.

What You’ll Do

• Build, tune, and continuously improve security detection and monitoring capabilities across our technology ecosystem.


• Develop security automation and tooling to accelerate investigation, containment, evidence collection, and incident response.


• Investigate security incidents, identify root causes, and translate findings into sustainable prevention and detection improvements.


• Conduct security assessments across cloud, infrastructure, applications, and perimeter environments.


• Analyze emerging threats and abuse patterns, including account takeover, credential stuffing, payment abuse, bots, scraping, and API attacks.


• Partner with Engineering and SRE teams to improve logging, security controls, system hardening, and remediation.


• Support threat emulation, attack simulation, incident response, and continuous security improvement initiatives.

What You’ll Bring to the Team

• 2–3+ years of hands-on cybersecurity experience in Blue Team, Detection Engineering, Security Operations, Security Automation, or related areas.


• Strong experience with SIEM platforms such as Splunk, Elastic, Wazuh, or Sentinel, including building and tuning detection content.


• Proficiency in Python or Go for developing maintainable security automation and internal tooling.


• Strong fundamentals in Linux, networking, cloud security, APIs, and security monitoring .


• Familiarity with MITRE ATT&CK, Sigma, SOAR, incident response, threat intelligence, and attack simulation methodologies.


• Hands-on experience with enterprise perimeter security technologies, including Cloudflare and firewall management .


• Strong problem-solving and communication skills, with the ability to translate technical findings into clear risks and remediation recommendations.


• Willing to participate in an on-call rotation as an escalation tier .

Why You’ll Love Working Here

Cybersecurity at Blibli is about engineering solutions, not simply responding to alerts. You’ll have the opportunity to build security capabilities, automate how we respond to threats, and directly protect critical commerce and payment experiences. Join us in building a safer and more resilient digital ecosystem as we continue growth — transforming together.