Deskripsi pekerjaan
Blibli is on a journey to become Indonesia’s #1 e-commerce platform, built on trust, innovation, and care. The company creates better experiences for customers, merchants, and brands through technology and collaboration. As a Cybersecurity Engineer (Infrastructure Security), you will play a critical role in securing and enabling the e-commerce platform. This role focuses on designing, implementing, and continuously improving cloud and infrastructure security controls. The objective is to protect customer trust, ensure business continuity, support compliance requirements (PCI DSS, ISO 27001), and embed security into engineering processes to allow teams to ship products quickly and securely without compromising risk management.
Tanggung jawab: Design, implement, and maintain cloud security architectures.; Develop and enforce secure infrastructure patterns (IAM, network segmentation, encryption, audit logging).; Perform cloud security posture assessments and remediate misconfigurations.; Conduct threat modeling exercises (e.g., STRIDE).; Implement CIS Benchmark-based hardening standards across servers, clusters, and databases.; Collaborate with Engineering, Platform, SRE, and Product teams to integrate security into CI/CD pipelines.; Build and maintain security automation solutions.; Support identity and access management initiatives.; Produce technical compliance evidence and support audits.; Perform third-party and vendor security assessments..
Kualifikasi: Experience in cloud security architectures (AWS, GCP, or Azure).; Proficiency in Python, Go, Bash, or similar technologies for security automation.; Knowledge of Infrastructure-as-Code (IaC) security (Terraform, CloudFormation).; Understanding of Kubernetes security (RBAC, admission controls, network policies, image security).; Familiarity with identity and access management (SSO, SAML, OIDC, secrets management).; Understanding of compliance frameworks (PCI DSS, ISO/IEC 27001:2022)..
Tanggung jawab
- Design, implement, and maintain cloud security architectures.
- Develop and enforce secure infrastructure patterns (IAM, network segmentation, encryption, audit logging).
- Perform cloud security posture assessments and remediate misconfigurations.
- Conduct threat modeling exercises (e.g., STRIDE).
- Implement CIS Benchmark-based hardening standards across servers, clusters, and databases.
- Collaborate with Engineering, Platform, SRE, and Product teams to integrate security into CI/CD pipelines.
- Build and maintain security automation solutions.
- Support identity and access management initiatives.
- Produce technical compliance evidence and support audits.
- Perform third-party and vendor security assessments.
Kualifikasi
- Experience in cloud security architectures (AWS, GCP, or Azure).
- Proficiency in Python, Go, Bash, or similar technologies for security automation.
- Knowledge of Infrastructure-as-Code (IaC) security (Terraform, CloudFormation).
- Understanding of Kubernetes security (RBAC, admission controls, network policies, image security).
- Familiarity with identity and access management (SSO, SAML, OIDC, secrets management).
- Understanding of compliance frameworks (PCI DSS, ISO/IEC 27001:2022).
Informasi lowongan
- Tipe pekerjaan
- Full-time
- Gaji
- Negosiasi