Your application and all hiring communication for this role run through the Techy Recruiter team.

About Ajaib

Ajaib is an Indonesian investment platform helping people access and manage investments across stocks, crypto, and U.S. stocks. As the platform continues to grow, protecting our customers, products, and technology is fundamental to maintaining trust.

We’re looking for a Security Platform Engineer to build and operate the tools, automation, and infrastructure that make security easier to adopt across Ajaib.

The role

You’ll help build the security platform that supports Ajaib’s engineering, cloud, and security teams.

This is a hands-on engineering role focused on creating reliable security tooling, automated guardrails, reusable services, and developer-friendly workflows. You’ll work closely with DevSecOps, application security, platform engineering, cloud infrastructure, and incident-response teams to improve security coverage without adding unnecessary friction.

You’ll turn security requirements into scalable engineering solutions that protect our applications, cloud environments, identities, data, and software-delivery pipelines.

What you’ll do

Build and maintain security platforms, services, tools, and automation used across engineering teams

Develop reusable security capabilities that integrate with CI/CD pipelines, cloud environments, and developer workflows

Automate security testing, vulnerability management, policy enforcement, and remediation processes

Integrate tools for SAST, DAST, software-composition analysis, secrets detection, container scanning, and infrastructure-as-code scanning

Build APIs, services, integrations, dashboards, and workflows that improve security visibility and response

Develop automated guardrails for cloud infrastructure, applications, containers, and deployment environments

Improve the collection, enrichment, prioritisation, and routing of security findings

Reduce false positives and help engineering teams receive clear, actionable security feedback

Build self-service security tools that enable developers to identify and resolve issues earlier

Strengthen secrets management, key management, identity controls, and privileged-access workflows

Support software-supply-chain security across source code, dependencies, build systems, artefacts, and deployment processes

Implement policy-as-code and automated compliance controls where appropriate

Improve security logging, telemetry, monitoring, and alerting across cloud and engineering platforms

Partner with application security and offensive-security teams to automate testing and validation

Support incident-response teams by building investigation, containment, and recovery tooling

Maintain the reliability, availability, performance, and security of internal security services

Create clear documentation, operational runbooks, and engineering standards

Contribute to technical design reviews and security architecture discussions

Track the effectiveness and adoption of security tooling through meaningful metrics

What you bring

Strong experience in security engineering, platform engineering, DevSecOps, cloud engineering, or software engineering

Hands-on experience building internal platforms, tools, services, or automation

Strong programming or scripting skills in languages such as Python, Go, Java, JavaScript, or TypeScript

Experience building and integrating APIs, event-driven workflows, and automated services

Practical knowledge of CI/CD pipelines and modern software-delivery practices

Experience with cloud platforms such as AWS, Google Cloud, or Azure

Strong understanding of containers, Kubernetes, infrastructure as code, and cloud-native architectures

Experience with tools such as Terraform, Docker, Kubernetes, GitHub Actions, GitLab CI, Jenkins, or similar technologies

Familiarity with application-security and cloud-security tooling

Understanding of vulnerability management, secure configuration, secrets management, and identity and access management

Experience working with logging, monitoring, observability, or security-telemetry platforms