Application & Data Security Engineer

Requirement:

1. Min. ±7 years of Experience in IT
2. Min. +3 years of Experience in Application & Data Security Engineer
3. Secure SDLC integration: SAST, DAST, SCA toolchain
4. API security testing, OAuth 2.0/OIDC hardening, microservices threat modelling
5. Data classification framework, DLP policy design and enforcement
6. Database security: encryption at rest/transit, database activity monitoring (DAM)
7. Cloud workload security: CSPM, container image scanning, Kubernetes RBAC
8. Compliance-driven code review per OJK data governance requirements

Key Activities:

1. Secure SDLC gate reviews: SAST/DAST/SCA scans integrated into CI/CD pipeline
2. Data Loss Prevention (DLP) policy tuning and incident response for data exfiltration alerts
3. Database Activity Monitoring (DAM) report review and anomaly escalation

Deliverables:

1. Application Security Test Reports
2. DLP Policy Document
3. DAM Monthly Review