Security Engineering Manager – Traveloka

JagoKerja.com – At Traveloka, we firmly believe in equal opportunities for all because diversity drives creativity and excellence. We encourage individuals from diverse backgrounds to apply for opportunities with us. Our hiring decisions are based on qualifications and merit in accordance with a fair and transparent process, regardless of race, ethnicity, religion, sex, gender identity, sexual orientation, age, marital status, disability, military service, or any other aspect of diversity. Join us in our mission to transform the travel industry and embrace the values that drive us to innovate and serve customers worldwide.

---

Deskripsi Pekerjaan :

1. The Security Engineer at Traveloka is responsible to ensure that Traveloka’s products, services, infrastructures, and business operations meet the high-security standards through control, verification, testing, design, monitoring, and implementation of technical security engineering and operation practices.
2. DevSecOps, an evolving practice, integrates development, security, and operations within the software development, deployment, and operational landscape. Positioned under the Information Security at Traveloka, the DevSecOps team serves as a central unit responsible for delivering security technology across all technology departments. However, DevSecOps transcends mere tool installation or the shift-left paradigm. It embodies the concept of ‘shift-everywhere,’ seamlessly weaving security into every stage of software and system engineering even before the development and after the deployment. Success in this role demands robust analytical, reasoning, and managerial abilities, crucial for comprehending our environment’s unique requirements and crafting bespoke security solutions tailored to these needs.

Kualifikasi :

1. Proven track record of managing software, security, infrastructure, or DevOps engineers to work on implementation and integration of security solutions in large-scale code repositories, services, and platforms with at least 2 years of leadership experience and 3 years as individual contributor.
2. Experience in managing projects related to software development and DevOps with agile methodologies.
3. Fluent in programming with any language and shell scripting.
4. Experience in cloud computing like AWS and GCP.
5. Experience in Java, Node.js, Python, and mobile (Android/iOS) is a plus.
6. High technical understanding on web application security vulnerabilities, mobile application security and Linux exploitation.
7. Able to practically demonstrate various security tests and control implementation such as SAST, DAST, IAST, SCA, WAF, secure-by-design, secure framework, compile-time security check, and runtime application security.
8. Excellent written and verbal communication skills.
9. Possessing a self-initiative mindset to bridge the gap between Software Engineering, Infrastructure Engineering, and Security Engineering while providing a framework for the whole technology team and management to perform security assurance.
10. Dedication to cybersecurity alongside a strong commitment to continuous learning about new technologies.

Keterangan & Catatan

Kunjungi Instagram Kami :

@lokerjakarta.info1, @lokerlampung.info_, @loker.tanggerang.info_

---