Product Security Engineer

Ajaib

Jakarta, Jakarta, Indonesia Hybrid permanent

Posted: May 7, 2026

Job Description

To elevate Ajaib’s security posture to global financial standards by building a high-velocity "Paved Road". You will move away from being a "siloed" security auditor to becoming an enabler who builds the automated infrastructure that makes the secure path the easiest path for developers.

Responsibilities

1. Building the "Paved Road" (Platform Layer)

• Continuous Scanning: Integrate SAST, DAST, and SCA (Software Composition Analysis) into CI/CD pipelines (GitHub Actions) to provide instant feedback to developers.
• Security-as-Code: Automate security gates in the deployment pipeline to block high/critical severity findings from reaching production.
• Tooling Ownership: Manage and maximize the value of the current security stack, including SonarQube, Cloudflare [WAF] and Cloud Automation .
• Infrastructure-as-Code (IaC): Build IaC guardrails with automated drift detection to ensure cloud infrastructure (GCP/AWS) remains resilient.

2. Delivery & Cultural Leadership

• Security Champions: Identify and support embedded Security Champions in every squad, ensuring threat modeling occurs during the design phase rather than right before launch.
• Vulnerability Management: Transition from manual tracking to a prioritized Jira backlog, partnering with developers to verify root causes and remediation.
• Security Culture: Run developer awareness sessions and secure code workshops to foster a "you build it, you run it, you secure it" mindset.

3. Fintech & API Security

• API Assessment: Test payment APIs, transaction flows, and KYC/AML pipelines for fintech-specific attack vectors like BOLA (Broken Object Level Authorization) and mass assignment.
• Compliance Support: Ensure technical execution meets Governance Layer standards for Zero Trust and corporate identity anchoring.

Requirements:
• AppSec Fundamentals: Deep understanding of OWASP Top 10, CWE, and secure SDLC principles.
• Automated Tooling: Proficiency in SAST/DAST/SCA tools such as Semgrep, Snyk, Burp Suite Professional, and SonarQube.
• Cloud & CI/CD: Practical experience with GCP/AWS IAM, secrets management, and embedding security into GitHub Actions.
• Threat Modeling: Ability to conduct threat models using STRIDE or PASTA during the design phase.
• Scripting: Proficiency in Python or Bash for scan automation and custom security checks.
• Identity & Access: Experience with JumpCloud or Google Workspace for identity anchoring and automated lifecycle management.
• Crypto Exposure: Understanding of wallet security, smart contract audit basics, or DeFi risk awareness.
• Fintech Security: Awareness of PCI-DSS standards and payment gateway security.

Benefits:
Join us as we make magic happen to increase Indonesia’s financial inclusion!

Why Apply Through MisuJob?

AI-Powered Job Matching: MisuJob uses advanced artificial intelligence to analyze your skills, experience, and career goals. Our matching algorithm compares your profile against thousands of job requirements to find positions where you have the highest chance of success. This saves you hours of manual job searching and ensures you only see relevant opportunities.

One-Click Applications: Once you create your profile, applying to jobs is effortless. Your resume and cover letter are automatically tailored to highlight the most relevant experience for each position. You can apply to multiple jobs in minutes, not hours.

Career Intelligence: Beyond job matching, MisuJob provides valuable career insights. See how your skills compare to market demands, identify skill gaps to address, and understand salary benchmarks for your experience level. Make data-driven decisions about your career path.

Frequently Asked Questions

How do I apply for this position?

Click the "Register to Apply" button above to create a free MisuJob account. Once registered, you can apply with one click and track your application status in your dashboard.

Is MisuJob free for job seekers?

Yes, MisuJob is completely free for job seekers. Create your profile, get matched with jobs, and apply without any cost. We help you find your dream job without any hidden fees.

How does AI matching work?

Our AI analyzes your resume, skills, and experience to understand your professional profile. It then compares this against job requirements using natural language processing to calculate a match percentage. Higher matches mean better fit for the role.

Can I apply to jobs in other countries?

Absolutely. MisuJob features jobs from companies worldwide, including remote positions. Filter by location or look for remote opportunities to find jobs that match your preferences.

Ready to Apply?

Join thousands of job seekers using MisuJob's AI to find and apply to their dream jobs automatically.