Senior DevSecOps Engineer

Paper; Jakarta Barat; On-site; IDR 700,000,000 - 1,100,000,000; Full time

Job summary

Paper is seeking a Senior DevOps/DevSecOps Specialist to bridge DevOps and Cybersecurity across our cloud architecture. You will implement security controls, automate threat detection, and harden the software delivery pipeline to ensure resilient infrastructure.

Responsibilities include tuning infrastructure for availability and scalability, building automation, RCA for incidents, and maintaining documentation while integrating security testing and governance into CI/CD.3

Qualifications

• Bachelor's Degree in Computer Science, Computer Engineering, Cybersecurity, or a related field.

Responsibilities

• Tune and configure servers, clusters, and containers for high availability, performance, and scalability.
• Build automation to reduce errors and improve reliability.
• Perform root cause analysis for production incidents and resolve complex issues.
• Design and maintain procedures for troubleshooting, monitoring, and automated visualization.
• Maintain technical documentation for architecture and operational procedures.

Job description

Role Overview

We are looking for a Senior DevOps/DevSecOps Specialist who not only brings deep expertise in infrastructure automation, reliability, and CI/CD, but also possesses strong hands‑on experience in Cybersecurity. In this role, you will bridge the gap between DevOps and Security—implementing robust security controls across our cloud architecture, automating threat detection, securing software delivery pipelines, and ensuring our infrastructure is resilient against cyber threats.

What Will You Do

DevOps & Infrastructure Engineering

• Tune and configure servers, clusters, and containers appropriately to ensure high availability, performance, and scalability.


• Build tools and automation to reduce occurrences of errors, optimize system reliability, and improve customer experience.


• Perform root cause analysis (RCA) for production errors, investigate incidents, and resolve complex technical issues.


• Design, implement, and maintain procedures for system troubleshooting, monitoring, and automated visualization.


• Maintain comprehensive technical documentation for system architecture, operational procedures, and emergency response plans.

Cybersecurity & Infrastructure Hardening

• DevSecOps Integration: Embed security tools, static/dynamic code analysis (SAST/DAST), and automated vulnerability scanning directly into CI/CD pipelines.


• Security Testing & Code Reviews: Perform ongoing security testing, penetration testing, and code reviews to identify and improve software security posturing.


• System & Cloud Hardening: Implement, test, and operate advanced security techniques, access controls, network segmentation, and encryption strategies in compliance with a technical reference architecture.


• Incident Response & Threat Mitigation: Provide engineering designs for new software solutions to help mitigate security vulnerabilities and act as a key responder to security incidents.


• Governance & Advisory: Consult team members on secure coding practices, zero-trust architecture, and stay updated with the latest tools, security frameworks, and threat vectors.

What Are We Looking For

• Education & Experience: Bachelor's Degree in Computer Science, Computer Engineering, Cybersecurity, or a relevant field. Proven experience as a Senior DevOps, Infrastructure Engineer, DevSecOps Engineer, or Security Engineer.


• Security & Cryptography Expertise: Detailed technical knowledge of standards, frameworks, and capabilities for authentication and authorization (OAuth, SAML, IAM), applied cryptography, threat modeling, and remediation (OWASP Top 10).


• Scripting & Development: Strong proficiency in Ruby, Python, Go, or .NET, alongside advanced Bash scripting for automation and security orchestration.


• Database & Systems: Working knowledge of databases and SQL, especially production-level tuning, access security, and data encryption at rest/in transit.


• Containerization & CI/CD: Hands‑on mastery of Docker, Kubernetes, CI/CD pipelines (e.g., \"GitLab CI, GitHub Actions, Jenkins\"), Infrastructure as Code (Terraform/Ansible), and cloud-native security tools.


• Network & Web Protocols: Adequate knowledge of web-related technologies (Web Applications, Web Services, SOA), network/web protocols (TLS/SSL, WAF, VPNs), and Load Balancing / Async Queue setups.


• Security & Observability Tools: Proficiency in monitoring/APM tools (e.g., Datadog, Prometheus, Grafana, ELK), combined with SIEM, vulnerability scanners (e.g., SonarQube, Trivy, Snyk), and log auditing tools.


• Mindset: Strong passion for security research, continuous learning, and driving a proactive security culture across engineering teams.