Security Engineer - Offensive Security

PT Trinusa Travelindo; Daerah Khusus Ibukota Jakarta; On-site; IDR 30,000 - 70,000; Full time

Job summary

Join an innovative tech startup that is revolutionizing the travel marketplace in Indonesia. As a member of the Offensive Security Team, you will play a crucial role in identifying vulnerabilities and ensuring the security of our systems. Your expertise will help us stay ahead of emerging threats and contribute to a dynamic workplace that values growth and learning. If you are passionate about cybersecurity and eager to make a real impact, this is the perfect opportunity for you!

Qualifications

• Proven track record in technical cybersecurity and offensive security.
• Fluent in programming languages and shell scripting.
• Experience in various security domains including web and network security.

Responsibilities

• Conduct penetration testing and threat intelligence assessments.
• Maintain offensive threat models and develop security tools.
• Review bug bounty reports and hunt for vulnerabilities.

Skills

Cybersecurity Expertise

Programming

Shell Scripting

Windows Security

Unix Security

Network Security

Web Application Security

Cloud Computing (AWS, GCP)

Red Team Exercises

Purple Team Exercises

Job description

It's fun to work in a company where people truly BELIEVE in what they're doing!

Job Description

Securing an organization and its information systems requires a holistic approach that includes continuous security verification, extending beyond standard testing and assessment methods. By assuming the role of a threat actor, the Offensive Security Team delivers valuable findings and insights with practical impact, which must be prioritized. Utilizing an offensive or attacker’s mindset, the team continuously reviews everything within the organization—including applications, infrastructure, and business processes—to identify potential loopholes that could be exploited by a real attacker to compromise the organization.

As an Offensive Security team member at Traveloka, your daily tasks encompass penetration testing, adversarial emulation exercises, threat intelligence, maintaining offensive threat models, developing offensive security tools, reviewing bug bounty reports, and hunting vulnerabilities based on commonalities, internal trends, and latest threats. Your coverage area is comprehensive, assessing the organization from an attacker's perspective. We are seeking a candidate with robust cybersecurity technical expertise and a solid understanding of cyber intrusion in an organization. This role is crucial for ensuring we stay abreast of the latest threats and are capable of identifying unique and complex challenges specific to Traveloka.

Requirements

• Proven track record of highly technical cybersecurity expertise such as CTF (Capture the Flag), bug bounty, publication, blog, open source security tool contribution, speaking engagement, or Offensive Security certification.
• Fluent in programming with any language and shell scripting.
• Experience in Windows security, Unix security, network security, and web application security is a must.
• Experience in cloud computing like AWS and GCP is a plus.
• Experience in red or purple team exercises is a plus.
• Able to practically demonstrate various security vulnerabilities, exploits, and attacks in web applications, computer infrastructure, and personal computers.
• Understanding cybersecurity threats related to travel and tech industries.
• Excellent written and verbal communication skills.
• Dedication to cybersecurity with a strong commitment to continuous learning about new technologies.

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!

Traveloka (traveloka.com) is a tech startup based in Jakarta. We aim to revolutionize the Indonesian travel marketplace and make it more accessible to travelers across the country. Since it is a mammoth task, we'd love to have talented people from diverse backgrounds who can help us achieve our mission. We are committed to building a dynamic workplace where people truly enjoy their work and feel they can have a real impact.