Deskripsi pekerjaan
Blibli is transforming into a future-ready digital ecosystem where cybersecurity is fundamental to protecting customers, transactions, and business growth. As the platform scales, the company requires strong security capabilities to proactively identify threats, automate responses, and strengthen defenses against evolving cyber risks. The Senior Cybersecurity Engineer (Blue Team) will take a hands-on role in strengthening detection and response capabilities across applications, infrastructure, cloud, and critical business systems. This is an engineering-focused role responsible for building and improving security detection, automating security operations, investigating threats, and collaborating with Engineering and SRE teams to continuously improve the security posture.
Tanggung jawab: Build, tune, and continuously improve security detection and monitoring capabilities.; Develop security automation and tooling to accelerate investigation, containment, evidence collection, and incident response.; Investigate security incidents, identify root causes, and translate findings into sustainable improvements.; Conduct security assessments across cloud, infrastructure, applications, and perimeter environments.; Analyze emerging threats and abuse patterns (account takeover, credential stuffing, payment abuse, bots, scraping, API attacks).; Partner with Engineering and SRE teams to improve logging, security controls, system hardening, and remediation.; Support threat emulation, attack simulation, and incident response..
Kualifikasi: 2–3+ years of hands-on cybersecurity experience in Blue Team, Detection Engineering, Security Operations, Security Automation, or related areas.; Strong experience with SIEM platforms such as Splunk, Elastic, Wazuh, or Sentinel, including building and tuning detection content.; Proficiency in Python or Go for developing maintainable security automation and internal tooling.; Strong fundamentals in Linux, networking, cloud security, APIs, and security monitoring..
Tanggung jawab
- Build, tune, and continuously improve security detection and monitoring capabilities.
- Develop security automation and tooling to accelerate investigation, containment, evidence collection, and incident response.
- Investigate security incidents, identify root causes, and translate findings into sustainable improvements.
- Conduct security assessments across cloud, infrastructure, applications, and perimeter environments.
- Analyze emerging threats and abuse patterns (account takeover, credential stuffing, payment abuse, bots, scraping, API attacks).
- Partner with Engineering and SRE teams to improve logging, security controls, system hardening, and remediation.
- Support threat emulation, attack simulation, and incident response.
Kualifikasi
- 2–3+ years of hands-on cybersecurity experience in Blue Team, Detection Engineering, Security Operations, Security Automation, or related areas.
- Strong experience with SIEM platforms such as Splunk, Elastic, Wazuh, or Sentinel, including building and tuning detection content.
- Proficiency in Python or Go for developing maintainable security automation and internal tooling.
- Strong fundamentals in Linux, networking, cloud security, APIs, and security monitoring.
Informasi lowongan
- Tipe pekerjaan
- Full-time
- Gaji
- Negosiasi