Senior Cybersecurity Engineer (Blue Team)

About The Role Blibli is transforming into a future-ready digital ecosystem where cybersecurity is fundamental to protecting our customers, transactions, and business growth. As our platform scales, we need strong security capabilities that can proactively identify threats, automate response, and strengthen our defenses against evolving cyber risks.

As a Senior Cybersecurity Engineer , you will take a hands-on role in strengthening our detection and response capabilities across applications, infrastructure, cloud, and critical business systems. You will build and improve security detection, automate security operations, investigate threats, and work closely with Engineering and SRE teams to continuously improve our security posture.

This is an engineering-focused cybersecurity role—not a Tier-1 SOC monitoring position.

What You’ll Do

• Build, tune, and continuously improve security detection and monitoring capabilities across our technology ecosystem.
• Develop security automation and tooling to accelerate investigation, containment, evidence collection, and incident response.
• Investigate security incidents, identify root causes, and translate findings into sustainable prevention and detection improvements.
• Conduct security assessments across cloud, infrastructure, applications, and perimeter environments.
• Analyze emerging threats and abuse patterns, including account takeover, credential stuffing, payment abuse, bots, scraping, and API attacks.
• Partner with Engineering and SRE teams to improve logging, security controls, system hardening, and remediation.
• Support threat emulation, attack simulation, incident response, and continuous security improvement initiatives.

What You’ll Bring to the Team

• 2–3+ years of hands-on cybersecurity experience in Blue Team, Detection Engineering, Security Operations, Security Automation, or related areas.
• Strong experience with SIEM platforms such as Splunk, Elastic, Wazuh, or Sentinel, including building and tuning detection content.
• Proficiency in Python or Go for developing maintainable security automation and internal tooling.
• Strong fundamentals in Linux, networking, cloud security, APIs, and security monitoring .
• Familiarity with MITRE ATT&CK, Sigma, SOAR, incident response, threat intelligence, and attack simulation methodologies.
• Hands-on experience with enterprise perimeter security technologies, including Cloudflare and firewall management .
• Strong problem-solving and communication skills, with the ability to translate technical findings into clear risks and remediation recommendations.
• Willing to participate in an on-call rotation as an escalation tier .

Why You’ll Love Working Here Cybersecurity at Blibli is about engineering solutions, not simply responding to alerts. You’ll have the opportunity to build security capabilities, automate how we respond to threats, and directly protect critical commerce and payment experiences. Join us in building a safer and more resilient digital ecosystem as we continue growth — transforming together.