Senior Application Security Engineer

Permata Bank; Tangerang Selatan; On-site; IDR 300,000,000 - 540,000,000; Full time

Job summary

Permata Bank is seeking a skilled Application Security professional in Indonesia to lead risk-based assessments of web, mobile, and API components, aligning findings with release milestones and business impact. You will review evidence, validate findings, and coordinate remediation with cross-functional teams.

The role emphasizes secure SDLC, security testing standards, and building secure coding practices.

Qualifications

• Knowledge of OWASP Top 10 and API security in web/mobile apps.
• Experience with security testing tools and vulnerability analysis.
• Familiarity with secure SDLC, CI/CD, and risk-based remediation.

Responsibilities

• Plan and execute risk-based application security assessments across web, mobile, API.
• Validate pen testing results and perform remediation reviews.
• Coordinate with teams to discuss findings and monitor fixes.
• Provide evidence and closure documentation.

Skills

OWASP Top 10

OWASP API Top 10

Authentication

Authorization

Session security

Cryptography

Attack patterns

Education

Bachelor's degree in CS/InfoSec

Tools

Burp Suite

OWASP ZAP

Postman

Vulnerability scanners

Job description

Permata Bank is seeking a skilled Application Security professional in Indonesia to lead risk-based assessments of web, mobile, and API components, aligning findings with release milestones and business impact. You will review evidence, validate findings, and coordinate remediation with cross-functional teams.

The role emphasizes secure SDLC, security testing standards, and building secure coding practices.