Cybersecurity Engineer (Infrastructure Security)

Blibli is on a journey to become Indonesia’s #1 e-commerce platform — built on trust, innovation, and care. We’re creating better experiences for customers, merchants, brands, and sellers through technology, collaboration, and a deep commitment to quality. Here, every idea matters and every action helps us grow stronger together. As a Cybersecurity Engineer (Infrastructure Security) , you will play a critical role in securing and enabling our e-commerce platform by designing, implementing, and continuously improving cloud and infrastructure security controls. This role focuses on protecting customer trust, ensuring business continuity, supporting compliance requirements such as PCI DSS and ISO 27001, and embedding security into engineering processes so that teams can ship products quickly and securely without compromising risk management. What You'll Work on Together Design, implement, and maintain cloud security architectures across AWS, GCP, or Azure environments. Develop and enforce secure infrastructure patterns, including IAM least-privilege models, network segmentation, encryption, and audit logging. Perform cloud security posture assessments and remediate infrastructure misconfigurations identified through CSPM tools. Conduct threat modeling exercises (e.g., STRIDE) for new products, services, and major platform changes. Implement and maintain CIS Benchmark-based hardening standards across Linux servers, Kubernetes clusters, databases, containers, and cloud environments. Collaborate with Engineering, Platform, SRE, and Product teams to integrate security controls into CI/CD pipelines and infrastructure workflows. Build and maintain security automation solutions using Python, Go, Bash, or similar technologies. Develop Infrastructure-as-Code (IaC) security controls and policy-as-code implementations for Terraform and CloudFormation environments. Design and improve Kubernetes security controls, including RBAC, admission controls, network policies, image security, and workload protection. Support identity and access management initiatives, including SSO, SAML, OIDC, privileged access management, service accounts, secrets management, and key rotation. Produce technical compliance evidence and support PCI DSS, ISO/IEC 27001:2022, internal audit, and external audit activities. Perform third-party and vendor security assessments to identify and mitigate infrastructure-related risks. Implement and maintain infrastructure monitoring, logging, audit trails, and security observability capabilities. Respond to infrastructure security incidents, vulnerabilities, and escalations as part of the on-call rotation. Partner with development teams to improve security by design and shift security controls earlier into the software development lifecycle. Continuously evaluate emerging threats, technologies, and industry best practices to strengthen the organization's security posture. Qualifications Bachelor's degree (S1) in Computer Science, Information Systems, Informatics Engineering, Computer Engineering, Electrical Engineering, Telecommunications, or related technical disciplines. 3–5 years of experience in Infrastructure Security, Cloud Security, Security Engineering, Security Architecture, Platform Security, DevSecOps, or related fields. Proven hands-on experience managing and securing production infrastructure environments. Experience supporting engineering teams through shared platform and security services. Fluent in Bahasa Indonesia with working proficiency in English for technical documentation, cloud advisories, audit frameworks, and vendor communications. Required Technical Skills: AWS, GCP, Microsoft Azure, Linux OS, Python & Golang. Preferred Technical Skills: Kubernetes, IaC, Identity & Access Management. Why You’ll Love Working Here At our company, cybersecurity is not a gatekeeper function, it's a business enabler. You'll work directly with engineering teams to protect revenue, customer trust, payment operations, and platform availability while helping the business scale securely. If you're passionate about cloud security, automation, infrastructure engineering, and solving complex challenges in a fast-moving e-commerce environment, we'd love to hear from you.