Senior DevSecOps Engineer — Secure SDLC & CI/CD

Traveloka; Pagedangan; On-site; IDR 400,000,000 - 800,000,000; Full time

Job summary

Traveloka is seeking a DevSecOps Engineer to own complex security-in-pipeline programs across the SDLC and embed security in CI/CD workflows. You will define tooling standards and partner with engineering, product, and leadership to ship securely at scale.

You will lead security automation, implement AI-assisted tooling, and shape the secure development culture across Traveloka's engineering org, ensuring compliance, risk reduction, and fast, trusted delivery across 11 markets.

Qualifications

• 6+ years in DevSecOps, application security, or secure SDLC engineering.
• Production-grade security tooling and automation in Python or equivalent.
• Defined security standards adopted across an engineering organisation.
• Experience driving change to adopt secure coding in build pipelines.
• Ability to balance security, operations, and business trade-offs with data.
• Influence across senior engineers and cross-functional leaders.
• Experience with AI security tools and responsible adoption.
• Bachelor’s degree in CS, Info Security, or related field.
• Proven ability to define pipeline security architecture at scale.

Responsibilities

• Own and run the most complex SDLC security programs end-to-end.
• Define technical standards, scanning methodologies, and tooling frameworks.
• Identify gaps and lead cross-functional improvement for secure coding.
• Act as senior technical authority in security discussions with leadership.
• Influence engineering teams toward secure coding and design.
• Define AI tools adoption within secure development workflows.
• Define and own Traveloka's CI/CD security architecture.
• Lead design and delivery of security automation programs scaling feedback.
• Shape secure development culture and developer guidance.

Skills

DevSecOps

CI/CD security tooling

Python

SCA/SAST integrations

Policy-as-code

Vulnerability scanning

Security architecture

Stakeholder communication

AI security tooling

Security standards

Education

Bachelor's degree in Computer Science or Information Security

Tools

Python

Job description

Traveloka is seeking a DevSecOps Engineer to own complex security-in-pipeline programs across the SDLC and embed security in CI/CD workflows. You will define tooling standards and partner with engineering, product, and leadership to ship securely at scale.

You will lead security automation, implement AI-assisted tooling, and shape the secure development culture across Traveloka's engineering org, ensuring compliance, risk reduction, and fast, trusted delivery across 11 markets.