Your application and all hiring communication for this role run through the Techy Recruiter team.

About Ajaib

Ajaib is an Indonesian investment platform helping people access and manage investments across stocks, crypto, and U.S. stocks. As the platform continues to grow, protecting our customers, products, and technology is fundamental to maintaining trust.

We’re looking for a DevSecOps Lead to embed security into the way we build, deploy, and operate our technology.

The role

You’ll lead DevSecOps across Ajaib’s engineering and security organisations.

This is a hands-on leadership role focused on making security an integrated and automated part of the software-development lifecycle. You’ll work closely with engineering, platform, infrastructure, application security, cloud, and operations teams to build secure delivery pipelines, strengthen cloud controls, and reduce risk without slowing down releases.

You’ll define the DevSecOps roadmap, improve security automation, and help engineering teams adopt secure practices across applications, infrastructure, containers, and cloud environments.

What you’ll do

Define and lead Ajaib’s DevSecOps strategy, roadmap, standards, and operating model

Embed security controls throughout the software-development lifecycle

Integrate security testing into CI/CD pipelines across applications, services, and infrastructure

Implement and improve SAST, DAST, software-composition analysis, secrets detection, container scanning, and infrastructure-as-code scanning

Build automated security guardrails that help teams identify and resolve issues early

Partner with engineering and platform teams to improve the security of build, deployment, and release processes

Strengthen security across cloud environments, containers, Kubernetes, APIs, backend services, and internal platforms

Establish secure infrastructure-as-code practices and reusable security patterns

Improve identity, access, secrets, keys, and privileged-access controls across engineering environments

Define secure configuration baselines for cloud services, containers, workloads, and deployment platforms

Automate vulnerability identification, prioritisation, assignment, remediation tracking, and verification

Work with application security and engineering teams to reduce false positives and make security findings actionable

Support threat modelling, architecture reviews, and security assessments for new systems and platforms

Improve logging, monitoring, alerting, and detection across development and production environments

Partner with incident-response teams to strengthen readiness, containment, recovery, and post-incident improvements

Assess and improve software-supply-chain security, including dependencies, artefacts, build systems, and third-party components

Define DevSecOps metrics and provide clear reporting on security coverage, risk, and remediation progress

Build security knowledge across engineering teams through documentation, training, tooling, and practical guidance

Mentor DevSecOps and security engineers and help grow the function as Ajaib scales

What you bring

Strong experience in DevSecOps, cloud security, platform security, security engineering, or infrastructure security

Experience leading DevSecOps programmes, technical initiatives, or security-engineering teams

Hands-on experience building and securing CI/CD pipelines

Strong knowledge of cloud security, containers, Kubernetes, infrastructure as code, and modern software-delivery practices

Experience implementing security tools such as SAST, DAST, software-composition analysis, secrets scanning, container scanning, and infrastructure-as-code scanning

Strong understanding of software-supply-chain security and secure build practices

Experience with cloud platforms such as AWS, Google Cloud, or Azure

Experience with tools such as Terraform, Kubernetes, Docker, GitHub Actions, GitLab CI, Jenkins, or similar technologies

Ability to write automation and integrations using languages such as Python, Go, Bash, or JavaScript

Strong understanding of identity and access management, secrets management, encryption, key management, and privileged access