Security Platform Engineer

Your application and all hiring communication for this role run through the Techy Recruiter team.

About Ajaib

Ajaib is an Indonesian investment platform helping people access and manage investments across stocks, crypto, and U.S. stocks. As the platform continues to grow, protecting our customers, products, and technology is fundamental to maintaining trust.

We’re looking for a Security Platform Engineer to build and operate the tools, automation, and infrastructure that make security easier to adopt across Ajaib.

The role

You’ll help build the security platform that supports Ajaib’s engineering, cloud, and security teams.

This is a hands-on engineering role focused on creating reliable security tooling, automated guardrails, reusable services, and developer-friendly workflows. You’ll work closely with DevSecOps, application security, platform engineering, cloud infrastructure, and incident-response teams to improve security coverage without adding unnecessary friction.

You’ll turn security requirements into scalable engineering solutions that protect our applications, cloud environments, identities, data, and software-delivery pipelines.

What you’ll do

• Build and maintain security platforms, services, tools, and automation used across engineering teams
• Develop reusable security capabilities that integrate with CI/CD pipelines, cloud environments, and developer workflows
• Automate security testing, vulnerability management, policy enforcement, and remediation processes
• Integrate tools for SAST, DAST, software-composition analysis, secrets detection, container scanning, and infrastructure-as-code scanning
• Build APIs, services, integrations, dashboards, and workflows that improve security visibility and response
• Develop automated guardrails for cloud infrastructure, applications, containers, and deployment environments
• Improve the collection, enrichment, prioritisation, and routing of security findings
• Reduce false positives and help engineering teams receive clear, actionable security feedback
• Build self-service security tools that enable developers to identify and resolve issues earlier
• Strengthen secrets management, key management, identity controls, and privileged-access workflows
• Support software-supply-chain security across source code, dependencies, build systems, artefacts, and deployment processes
• Implement policy-as-code and automated compliance controls where appropriate
• Improve security logging, telemetry, monitoring, and alerting across cloud and engineering platforms
• Partner with application security and offensive-security teams to automate testing and validation
• Support incident-response teams by building investigation, containment, and recovery tooling
• Maintain the reliability, availability, performance, and security of internal security services
• Create clear documentation, operational runbooks, and engineering standards
• Contribute to technical design reviews and security architecture discussions
• Track the effectiveness and adoption of security tooling through meaningful metrics

What you bring

• Strong experience in security engineering, platform engineering, DevSecOps, cloud engineering, or software engineering
• Hands-on experience building internal platforms, tools, services, or automation
• Strong programming or scripting skills in languages such as Python, Go, Java, JavaScript, or TypeScript
• Experience building and integrating APIs, event-driven workflows, and automated services
• Practical knowledge of CI/CD pipelines and modern software-delivery practices
• Experience with cloud platforms such as AWS, Google Cloud, or Azure
• Strong understanding of containers, Kubernetes, infrastructure as code, and cloud-native architectures
• Experience with tools such as Terraform, Docker, Kubernetes, GitHub Actions, GitLab CI, Jenkins, or similar technologies
• Familiarity with application-security and cloud-security tooling
• Understanding of vulnerability management, secure configuration, secrets management, and identity and access management
• Experience working with logging, monitoring, observability, or security-telemetry platforms
• Strong understanding of software-engineering practices, including testing, version control, code review, and maintainable system design
• Ability to translate security needs into scalable and practical engineering solutions
• Strong troubleshooting and problem-solving skills
• Ability to work effectively across security, engineering, infrastructure, and product teams
• Strong written and spoken English

Nice to have

• Previous experience within fintech, banking, brokerage, payments, investment, or cryptocurrency platforms
• Experience building a security platform or internal developer platform
• Familiarity with policy-as-code tools and automated compliance frameworks
• Experience with security orchestration, automation, and response platforms
• Knowledge of cloud-security posture management, workload protection, or identity-security tooling
• Experience working with vulnerability-management platforms and security-data pipelines
• Familiarity with message queues, serverless architectures, microservices, and distributed systems
• Experience building secure, highly available internal services
• Knowledge of frameworks and standards such as NIST, CIS Benchmarks, ISO 27001, or PCI DSS
• Certifications related to cloud, Kubernetes, software engineering, or security

Why join

• High-impact engineering: build security capabilities used across Ajaib’s technology organisation
• Meaningful technical challenges: solve problems across cloud, applications, identity, CI/CD, and software supply chains
• Security at scale: create platforms and automation that protect the business as it grows
• Developer-focused influence: make secure engineering easier, faster, and more consistent
• Strong collaboration: work across application security, DevSecOps, offensive security, cloud, and platform teams
• Meaningful mission: help protect customers, investments, personal data, and financial transactions

Notes to Applicants

A few things worth knowing before you apply:

Interviews may include technical and security-engineering discussions. You may be asked to design an internal security service, review an automation workflow, troubleshoot a platform issue, or explain how you would integrate a security control into an engineering environment.

Please do not include confidential information, customer data, source code, credentials, security findings, or proprietary details from current or previous employers during the interview process.

If you need accommodations at any stage of the recruitment process, please let us know in your application.

About Techy Recruiter Techy Recruiter is a boutique hiring partner for startups and scaleups across Europe and the Gulf. We run searches end to end and care about a clear, fair process for every person who applies.

Equal opportunity We assess people on merit. All applicants are welcome regardless of background, and we do not discriminate on any basis protected by law.

Your data We treat your information as confidential and use it only for this hiring process.