Security Engineer

Netzme Pay; Daerah Khusus Ibukota Jakarta; On-site; IDR 300.000.000 - 400.000.000; Full time

Job summary

A tech company in Indonesia is seeking a Security Engineer to enhance the security and integrity of its software and systems. The ideal candidate has a Bachelor's degree in Computer Science and at least 3 years of experience in application security. Key responsibilities include code reviews, security testing, and incident response. This role aims to promote a security-first culture across teams.

Qualifications

• Minimum 3 years of experience in application security, secure coding, and vulnerability management.
• Strong knowledge of OWASP Top 10 and modern attack vectors.
• Good understanding of cloud security principles.

Responsibilities

• Review code to identify and fix security issues.
• Perform penetration testing and vulnerability scanning.
• Work with teams to identify potential threats and risks.
• Advise on secure design patterns and architecture.
• Help investigate and resolve security incidents.

Skills

Application security

Secure coding

Vulnerability management

Web application vulnerabilities

Analytical skills

Communication

Education

Bachelor’s degree in Computer Science or related field

Tools

Burp Suite

OWASP ZAP

Job description

Role Overview

We are looking for a Security Engineer to ensure the security and integrity of our software and systems. You will work closely with engineering teams and leads across business, finance, HR, and operations to implement security best practices and protect our applications and infrastructure.

What you’ll do:

• Secure Code Review: Review code to identify and fix security issues, including SQL injection, XSS, and IDOR vulnerabilities.
• Security Testing: Perform penetration testing, vulnerability scanning, and static/dynamic analysis to find and fix weaknesses.
• Threat Modeling: Work with development teams to identify potential threats, assess risks, and suggest mitigation strategies.
• Bug Bounty Management: Triage and validate security reports from external researchers.
• Security Architecture: Advise on secure design patterns and architecture to ensure security is integrated from the start.
• Incident Response: Help investigate and resolve security incidents, minimizing impact and preventing recurrence.
• Security Awareness: Educate engineering and non-engineering teams on security best practices and promote a security-first culture.
• Continuous Learning: Stay updated on the latest security trends, vulnerabilities, and attack techniques.

Must-Have Qualifications:

• Bachelor’s degree in Computer Science, Engineering, or related field.
• Minimum 3 years of experience in application security, secure coding, and vulnerability management.
• Strong knowledge of web application vulnerabilities, OWASP Top 10, and modern attack vectors.
• Hands-on experience with web application security testing tools (e.g., Burp Suite, OWASP ZAP).
• Proficiency in secure coding practices with common programming languages (Java, Python, Golang).
• Good understanding of cloud security principles and best practices.
• Strong analytical and problem-solving skills.
• Excellent communication and teamwork abilities.

Nice-to-Have:

• Security certifications such as CISSP, CEH, OSCP.
• Experience with multiple cloud platforms (AWS, GCP, Azure).
• Familiarity with DevSecOps practices and CI/CD security integration.

Let’s create something awesome together #Netzme #Hiring #WeAreHiring