Ajaib

Product Manager

• Assist in conducting market research to identify trends, opportunities, and user needs in the financial technology space.
• Aid in defining product requirements and creating documentation for new features.
• Participate in brainstorming sessions and contribute ideas for product improvements and new offerings.
• Support user testing and gather feedback to understand user behavior and preferences.
• Collaborate with cross-functional teams to support product development and ensure successful execution.

Product Management Internship

Financial Planning and Analysis

• Monitor daily cash flow and maintain optimal liquidity levels.
• Manage cash operations and prepare cash flow forecasts to support business needs.
• Support the development of cash management strategies to improve efficiency and mitigate financial risk.
• Prepare and provide data for financial reporting and audit purposes.
• Ensure compliance with internal policies, controls, and regulatory requirements.
• Collaborate with cross-functional teams to resolve treasury matters and enhance operational processes.

Finance Operations Staff

Data Engineer

• Design and implement scalable data pipelines
• Optimize data storage and retrieval systems
• Collaborate with analytics and software engineer team

Senior Data Engineer

Engineer

• Identity Anchoring: Own the Identity Provider (IDP/SSO) lifecycle using JumpCloud, ensuring 100% of corporate assets (GitHub, AWS, etc.) are accessible only via the Corporate IDP, coordinating with related units, including People team
• The "Kill Switch" provisioning: Implement and maintain programmatic offboarding to achieve a Mean Time to Revoke (MTTR) of <5 minutes across all systems, alerted from Slack channel maintained by People team.
• Access Orchestration: Transition from manual tickets to automated approval workflows and self-service access.
• Onboarding: Ensure naming convention uniformity, Lead the migration of all contributors to corporate-managed accounts, implementing automated blocking for non-corporate commits.
• Permission Management: Define technical roles and permissions (RBAC/ABAC) and maintain the User Access Matrix for all personnel and third-party vendors.
• Platform Integration: Move toward Identity Orchestration by implementing short-lived, automated credentials and MFA.
• Least Privilege: Maintain segregation of duties and Least Privilege principles all the time on all systems.
• Maintain and update and ensure the access matrix is current and agreed by relevant parties.
• Maintain the system / tools list across organizations on a regular basis.
• Maintain the payment method / period: Ensure no downtime on the app / system caused by failed payment.
• Keep record and maintain the policies of access of each system and ensure they are approved by relevant stakeholders regularly.
• During identified employee rotation, ensure access provisioning follows the new business unit / department accordingly immediately with appropriate approval from the stakeholders.
• Data Governance: Maintain and update the Data Classification across Ajaib group.
• Data Retention: Ensure data retention is applied and maintained across Ajaib group.
• Incident Management: Log and maintain documentation of reported and known incidents
• Post Incident Review: Log and maintain documentation of reported and known incidents

Identity & Access Management Engineer

Security Engineer

• Monitoring & Triage: Lead 24x7 monitoring and triage of security alerts across SIEM (Wazuh), EDR (CrowdStrike), DLP and cloud environments.
• Incident Lifecycle: Lead detection, triage, containment, and post-incident reviews for infrastructure and cloud-layer security events.
• Core Metric Ownership: Drive the reduction of Mean Time to Detect (MTTD) through improved correlation and automated alerting.
• Threat Hunting: Perform proactive threat hunting using MITRE ATT&CK techniques to identify advanced threats before they impact production.
• Infrastructure-as-Code (IaC) Guardrails: Implement and monitor IaC guardrails with automated drift detection to prevent misconfigurations in GCP/AWS.
• Standardized Golden Images: Partner with engineering to deploy immutable infrastructure through standardized "Golden Images" to eliminate manual server hardening.
• SOAR & Response Playbooks: Build and manage automated SOAR (Security Orchestration, Automation, and Response) playbooks to reduce Mean Time to Respond (MTTR) and ensure instant containment of threats.
• Inventory Discovery: Implement automated inventory discovery to ensure "if it isn't tagged, it doesn't run" within cloud environments.
• DLP Governance.
• EDR Administration: Fine-tune and manage CrowdStrike Falcon (Managed Service) and oversee the decommissioning of legacy EDR solutions (Symantec).
• WAF Optimization: Manage and optimize Cloudflare WAF rules to protect application layers against DDoS and web attacks.
• Teleport Governance: Manage secure infrastructure access through Teleport, moving away from legacy SSH/VPN access toward a Zero-Trust identity anchor.
• Asset Monitoring: Monitor for threats targeting hot/cold storage systems and exchange infrastructure.
• Identity Integrity: Enforce the "Identity Anchor" by ensuring all infrastructure access is anchored to the corporate IDP (Google Workspace/JumpCloud).

Product Management Internship

Finance Operations Staff

Senior Data Engineer

Identity & Access Management Engineer

Cloud Security Engineer