DevSecOps Engineer BSD City, Indonesia Regular Engineering & IT 2026.10.23

Traveloka; Pagedangan; On-site; IDR 400,000,000 - 800,000,000; Full time

Job summary

Traveloka is seeking a DevSecOps Engineer to own complex security-in-pipeline programs across the SDLC and embed security in CI/CD workflows. You will define tooling standards and partner with engineering, product, and leadership to ship securely at scale.

You will lead security automation, implement AI-assisted tooling, and shape the secure development culture across Traveloka's engineering org, ensuring compliance, risk reduction, and fast, trusted delivery across 11 markets.

Qualifications

• 6+ years in DevSecOps, application security, or secure SDLC engineering.
• Production-grade security tooling and automation in Python or equivalent.
• Defined security standards adopted across an engineering organisation.
• Experience driving change to adopt secure coding in build pipelines.
• Ability to balance security, operations, and business trade-offs with data.
• Influence across senior engineers and cross-functional leaders.
• Experience with AI security tools and responsible adoption.
• Bachelor’s degree in CS, Info Security, or related field.
• Proven ability to define pipeline security architecture at scale.

Responsibilities

• Own and run the most complex SDLC security programs end-to-end.
• Define technical standards, scanning methodologies, and tooling frameworks.
• Identify gaps and lead cross-functional improvement for secure coding.
• Act as senior technical authority in security discussions with leadership.
• Influence engineering teams toward secure coding and design.
• Define AI tools adoption within secure development workflows.
• Define and own Traveloka's CI/CD security architecture.
• Lead design and delivery of security automation programs scaling feedback.
• Shape secure development culture and developer guidance.

Skills

DevSecOps

CI/CD security tooling

Python

SCA/SAST integrations

Policy-as-code

Vulnerability scanning

Security architecture

Stakeholder communication

AI security tooling

Security standards

Education

Bachelor's degree in Computer Science or Information Security

Tools

Python

Job description

Join Traveloka and channel your passion into a rewarding career

About Traveloka Traveloka is Southeast Asia’s leading all-in-one travel platform connecting millions globally with trusted, world-class experiences. With over 140 million app downloads and more than 40 million monthly active users, Traveloka stands as one of the most popular travel apps in the region.

Job Description

Job ID: MJ000418

About Traveloka

Traveloka is Southeast Asia's leading travel and lifestyle super-app. We connect tens of millions of travellers across the region with flights, hotels, experiences, financial services, and more — all from a single platform. Since our founding in 2012, we have expanded to eleven markets, processed billions of dollars in transactions, and built one of the most recognised consumer brands in the region.

We move fast because the region demands it. Southeast Asia is young, mobile-first, and growing faster than almost anywhere else on earth. We are not transplanting a Western playbook — we are writing a new one, from scratch, for a market that does not look like anywhere else — and we are calling for people who want to be part of that.

About the Team

Information Security at Traveloka protects one of Southeast Asia's largest travel platforms — millions of travellers, their payments, and their trust across 11 markets. We are the team that lets hundreds of engineers ship fast without shipping risk: building secure-by-default infrastructure, hunting threats in real time, and setting the standards every product team is held to. As we scale and as AI becomes native to how we build, the attack surface grows and our work only gets more critical.

Here you defend at genuine scale and own outcomes, not tickets. Whether you are hardening systems through security engineering or running detection and response in security operations, you will make decisions that move the whole company. If you want your security work to matter to real people across the region, you will fit right in.

As a DevSecOps Engineer, you are the technical authority for security within the software development lifecycle, driving the most complex security-in-pipeline programs, setting the standards your function operates by, and shaping how secure development is practiced across Traveloka as an individual contributor.

Job Scope:

• Own and drive the most complex, highest-impact SDLC security programs end-to-end, from scoping and embedding controls into CI/CD workflows through to remediation validation and organisational learning
• Define and enforce the technical standards, scanning methodologies, and tooling frameworks your function operates by — covering vulnerability detection in code and 3rd-party libraries — ensuring consistency, quality, and continuous improvement across all security work in the build pipeline
• Identify systemic gaps in secure coding practice and pipeline security coverage across the engineering organisation, and lead cross-functional improvement programs that produce lasting structural change in how Traveloka builds software securely
• Act as the senior technical authority in security discussions with engineering, product, and business leadership, providing the depth of reasoning and credibility that helps the organisation make sound, defensible decisions on security rules and build-time controls
• Influence engineering teams toward secure coding and design practices through deep technical credibility, shaping how security is embedded into Traveloka’s development workflows as an individual contributor
• Define how AI tools are adopted within secure development workflows, establishing the standards for responsible use and modeling the judgment that separates genuine security acceleration from risk amplification
• Define and own Traveloka’s CI/CD pipeline security architecture, setting the standards for how security controls are embedded across build workflows and ensuring coverage is consistent, reliable, and trusted by the engineering organisation
• Lead the design and delivery of the most complex security automation and tooling programs, producing capabilities that scale security feedback across hundreds of engineers and measurably improve secure development practices
• Shape Traveloka’s secure development culture at an organisational level, defining the security awareness strategy and developer guidance frameworks that make security a natural part of how engineering teams build

Requirements:

• You have at least 6 years of relevant experience in DevSecOps, application security, or secure SDLC engineering
• Designs and builds production-grade security tooling and automation (e.g. CI/CD security scanners, SCA/SAST integrations, policy-as-code) in Python or equivalent
• You have defined security standards or built security capabilities — such as vulnerability scanning, dependency/3rd-party library checks, or security rule validation — adopted across an entire engineering organisation
• You have driven the change management required to make them stick, including getting developer teams to adopt secure coding guidance during the build process
• You can weigh security, operational, and business trade-offs in your decisions and defend them with data, communicating clearly to both technical and business leadership
• You influence senior engineers and cross-functional leaders through credibility rather than authority
• You use AI security tools with sophistication, understanding their failure modes and shaping how they are adopted responsibly within developer workflows
• You have a bachelor’s degree in Computer Science, Information Security, or a related field
• You are the security engineer that engineering directors want in the room for the most consequential CI/CD and secure development architecture decisions
• You have defined pipeline security architecture at organizational scale and built security automation that measurably improved secure coding practices across hundreds of engineers

Join Us

At Traveloka, we firmly believe in equal opportunities for all because diversity drives creativity and excellence. We encourage individuals from diverse backgrounds to apply for opportunities with us. Our hiring decisions are based on qualifications and merit in accordance with a fair and transparent process, regardless of race, ethnicity, religion, sex, gender identity, sexual orientation, age, marital status, disability, military service, or any other aspect of diversity. Join us in our mission to transform the travel industry and embrace the values that drive us to innovate and serve customers worldwide.