job description
Join Abishar Technologies Indonesia as a DevOps Engineer specializing in DevSecOps and Secure CI/CD in the heart of Bali! This is a unique opportunity to work in a dynamic, forward-thinking environment while enjoying the vibrant culture and lifestyle of Bali’s tech hubs like Canggu, Ubud, and Denpasar.
In this role, you will play a pivotal part in integrating security into every phase of the software development lifecycle. Your expertise in Security by Design, Infrastructure Security, and Compliance Automation will ensure our systems are robust, scalable, and compliant with regulatory standards such as OJK (Financial Services Authority) and BI (Bank Indonesia).
We are looking for a proactive professional who thrives in collaborative settings and is passionate about automating security protocols, vulnerability scanning, and ensuring seamless, secure deployments. If you’re eager to make an impact in a growing tech company while living in paradise, this role is for you!
Responsibility
- Design, implement, and maintain Secure CI/CD pipelines to automate software delivery while integrating security best practices.
- Develop and enforce Security by Design principles across infrastructure, applications, and deployment processes.
- Automate compliance checks and reporting for regulatory standards (OJK, BI) to ensure adherence to industry requirements.
- Conduct regular vulnerability scanning and penetration testing, remediating identified risks promptly.
- Collaborate with development and security teams to embed DevSecOps practices into daily workflows.
- Monitor and optimize infrastructure security, including cloud and on-premise environments, to mitigate threats.
- Document security policies, procedures, and incident response plans for internal and external stakeholders.
- Stay updated with emerging threats, tools, and technologies in DevSecOps to drive continuous improvement.
Qualifications
- Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent experience).
- Proven experience (3+ years) in DevOps, CI/CD, or DevSecOps roles, with a focus on security.
- Hands-on experience with CI/CD tools (e.g., Jenkins, GitLab CI, GitHub Actions) and Infrastructure as Code (IaC) (e.g., Terraform, Ansible).
- Strong knowledge of security frameworks (e.g., OWASP, NIST) and compliance standards (OJK, BI).
- Proficiency in vulnerability scanning tools (e.g., Nessus, OpenVAS) and container security (Docker, Kubernetes).
- Experience with cloud platforms (AWS, Azure, GCP) and their security features.
- Familiarity with scripting languages (Python, Bash) and automation tools.
- Excellent problem-solving skills and the ability to work in a fast-paced, collaborative environment.