DevSecOps Engineer

Location: Jakarta, Indonesia; hybrid workplace

Company

hirify.global is focused on increasing financial inclusion in Indonesia.

What you will do

• Architect, maintain, and scale security automation across software development lifecycles.
• Integrate and manage SAST, DAST, and SCA tools within CI/CD pipelines.
• Configure and optimize Checkmarx, Semgrep, Snyk, and SonarQube to reduce false positives and improve actionable alerts.
• Run automated and targeted manual DAST using dynamic scanners and Burp Suite Professional against APIs and web services.
• Triage vulnerabilities, provide remediation guidance, and develop proof-of-concept fixes with engineering teams.
• Define automated pipeline security gates based on internal policies and vulnerability severity.

Requirements

• 4+ years of experience in DevOps, software engineering, or application security, including 2+ years dedicated to DevSecOps.
• Deep technical proficiency with Checkmarx, Semgrep, SonarQube, Snyk, and Burp Suite Professional.
• Experience building CI/CD automation and pipelines with GitHub Actions, GitLab CI, Jenkins, or Bitbucket Pipelines.
• Understanding of cloud-native infrastructure, Docker, Kubernetes, and secure Terraform-based infrastructure as code.
• Ability to read and understand code in multiple languages, including Python, Java, Go, and Node.

Nice to have

• Certified DevSecOps Professional, Practical DevSecOps, or CSSLP certification.

Culture & Benefits

• Opportunity to contribute to increasing financial inclusion in Indonesia.