About Bjak: Founded in 2019, Bjak began with the mission that people deserve smarter ways to plan, save, and grow their money. The company built the first mobile-first insurance platform, making insurance available online to millions across the region. It is now the leading insurance platform in Southeast Asia. Bjak is broadening its offerings to help people with spending, saving, investing, exchanging, travelling, and more. The mission is to help people get more from their money every day. Teams operate around the world, with over 20 nationalities represented, working from offices and remotely. Bjak is seeking talented and driven individuals who work from passion rather than counting hours, who enjoy building next-generation products rather than maintaining the status quo, and who care about making financial applications accessible to everyone rather than a select few. Role: Integrate security into Bjak's software delivery and infrastructure workflows. Collaborate with Platform, Cloud, and Engineering teams to automate controls and support secure delivery across AWS and GCP. Responsibilities include embedding code, dependency, container, infrastructure-as-code, and secrets scanning into CI/CD pipelines. Maintaining security guardrails for builds, releases, artifacts, deployment identities, and infrastructure changes. Securing containerized workloads, orchestration platforms, and deployment environments across AWS and GCP. Implementing least-privilege access, secrets management, artifact integrity, and secure configuration practices. Owning DevSecOps implementation for SC TRM and BNM RMiT, covering evidence, testing, remediation, and audit support. Partnering with teams using TypeScript/Node.js, Python, Swift, and Kotlin to integrate security checks into delivery workflows. Improving monitoring, vulnerability reporting, incident readiness, and secure delivery guidance. Requirements: Degree in Computer Science, Information Security, or a related field, or equivalent experience. 3+ years in DevOps, platform engineering, cloud security, or DevSecOps. Experience implementing and owning SC TRM and BNM RMiT controls for technology operations, change management, and secure delivery. Hands-on experience with GitHub Actions, GitLab CI, Jenkins, or similar CI/CD tools. Experience with AWS, GCP, Docker, Kubernetes, infrastructure as code, and cloud security controls. Knowledge of security scanning, software supply chain security, secrets management, IAM, logging, and monitoring. Scripting or programming skills in Python, TypeScript/Node.js, Bash, or Go, with the ability to collaborate across teams. Language: English is the primary working language across global teams. Strong English communication is required. Originally posted on Himalayas

DevSecOps Engineer

Deskripsi Pekerjaan

Ringkasan

Lowongan Terkait Lainnya

Tech Lead

Remote Full Stack Engineer – IAM Security (German speaking)

Software Engineer Speak Chinese (Remote Work)

Full-Stack Software Engineer