Senior Security Engineer (Red Team)

PT Amartha Mikro Fintek; Daerah Khusus Ibukota Jakarta; On-site; IDR 300.000.000 - 400.000.000; Full time

Job summary

Join a forward-thinking company as a Software Security Engineer, where you'll play a crucial role in safeguarding against cyber threats. This position offers the opportunity to work alongside a dynamic security team, focusing on vulnerability assessments, security controls in cloud environments, and enhancing security processes through automation. You'll gain hands-on experience with modern security tools and receive mentorship from seasoned professionals. This innovative firm is committed to fostering an inclusive workplace that values diverse perspectives, ensuring that every team member feels respected and empowered to contribute to meaningful projects. If you're passionate about cybersecurity and eager to grow your skills, this role is perfect for you.

Qualifications

• 2+ years of hands-on security testing or software development experience.
• Strong understanding of OWASP Top 10 and web security fundamentals.

Responsibilities

• Conduct vulnerability assessments and penetration tests on various platforms.
• Implement security controls in cloud environments and develop automation tools.

Skills

Security Testing

Software Development

Web Security Fundamentals

Scripting (Python, Bash, Go)

Communication Skills

Cybersecurity Trends Awareness

Education

Bachelor's Degree in Computer Science or related field

Tools

Burp Suite

OWASP ZAP

Git

GitHub

Jenkins

Terraform

Ansible

Metasploit

Nmap

MobSF

Frida

Job description

About the Role

The Software Security Engineer plays an essential role in protecting Amartha from evolving cyber threats. You will be part of our dynamic security team, focusing on identifying and mitigating security risks across our technology stack.

About the Team

Our Information Security team consists of dedicated security professionals who prioritize security and privacy by design. We work closely with development teams to enable secure product development while maintaining operational efficiency.

Primary Responsibilities

- Execute vulnerability assessments and penetration tests across web applications, APIs, and mobile platforms

- Implement and maintain security controls in cloud environments (GCP, AWS)

- Develop automation scripts and tools to enhance security processes

- Perform security code reviews and threat modeling

- Support our bug bounty program through triage and validation

- Monitor systems for security anomalies and investigate potential incidents

- Collaborate with development teams to remediate security findings

Growth & Development

- Mentorship from experienced security engineers

- Certification and training support

- Hands-on experience with modern security tools and challenges

- Clear career advancement path within the security team

Required Skills

- 2+ years of hands-on security testing or software development experience

- Strong understanding of web security fundamentals and OWASP Top 10

- Proficiency in at least one scripting/programming language (Python, Bash, or Go)

- Experience with security testing tools (Burp Suite, OWASP ZAP)

- Basic understanding of cloud security concepts

- Ability to clearly communicate technical findings to various stakeholders

- Fast learner with passion for cybersecurity

- Self-motivated to stay updated with security trends and threats

Preferred Qualifications

- Security certifications (eJPT, OSCP, CEH)

- Experience with cloud platforms (AWS, GCP)

- Knowledge of CI/CD pipelines and DevSecOps practices

- Mobile application security testing experience

- Familiarity with infrastructure as code (Terraform, Ansible)

Technical Environment

- Security Tools: Burp Suite, Metasploit, Nmap, MobSF, Frida

- Development Tools: Git, GitHub, Jenkins

- Cloud Platforms: AWS, GCP

- Programming Languages: Python, Bash, Go

At Amartha, we are dedicated to creating a workplace that celebrates diversity, ensures equity, and fosters inclusion. We believe that diverse perspectives—shaped by factors such as gender, age, race, ethnicity, education, culture, and life experiences—drive innovation and growth.

We actively welcome individuals from all backgrounds to join us in building an environment where everyone feels respected, valued, and empowered. Our commitment is to provide equal opportunities and foster a sense of belonging that enables our employees to thrive and make meaningful contributions.