Sr Security Engineer (Defensive/Blue Team)

Tiket.Com; Indonesia; On-site; IDR 600,000,000 - 900,000,000; Full time

Job summary

tiket.com is seeking a Sr Security Engineer (Defensive/Blue Team) to protect over 50 million users by analyzing logs, building automation, and coordinating with Infrastructure and Engineering to remediate vulnerabilities. The role emphasizes RESTful API orchestration, threat emulation, and staying current with security trends.

The ideal candidate has at least 5 years in defensive security, strong scripting skills in Python/Go/Bash, and experience with enterprise security tools like Cloudflare

Qualifications

• Minimum 5 years of experience in defensive security or related field.
• Solid understanding of vulnerability assessment methodologies and testing tools.
• Proficiency in Python, Go or Bash and integrating workflows via RESTful APIs.
• Experience building security automation solutions and coordinating multiple tools.

Responsibilities

• Analyze logs and present findings to stakeholders.
• Develop automation scripts and security tools.
• Build and maintain security automation workflows orchestrating tools via RESTful APIs.
• Collaborate with Infrastructure and Engineering to remediate vulnerabilities.
• Stay updated with offensive security techniques and threat landscape.
• Simulate advanced attack scenarios to identify weaknesses.

Skills

Defensive security

Security engineering

Security automation

Tools

Python

Go

Bash

RESTful APIs

Cloudflare

Firewall management

Job description

Sr Security Engineer (Defensive/Blue Team)

We think you also hate when travel app is giving you a headache, right? A slight misinformation can ruin the trip. That is exactly what we are tackling as t-fam! Making sure that our 50+ million users have the best experience in crafting their own adventure.

Your main duties in flying with us:

Conduct log analysis and able to present the findings to the stakeholders

Develop automation scripts and security tools using Python, Go, Bash , or similar programming languages.

Build and maintain security automation workflows , including the orchestration of security tools through RESTful APIs , to improve efficiency and support security pipelines.

Collaborate with the Infrastructure teams and Engineering teams to remediate identified vulnerabilities and strengthen overall security posture.

Stay up to date with the latest offensive security techniques, tools, and threat landscape.

Simulate advanced attack scenarios to identify and validate security weaknesses.

Mandatory belongings that you must prepare:

Minimum 5 years of experience in defensive security, cybersecurity engineering, network security, or a related cybersecurity field.

Solid understanding of vulnerability assessment methodologies , exploitation techniques, and security testing tools.

Proficiency in Python, Go, Bash, or other scripting languages , including experience integrating and automating workflows through RESTful APIs .

Experience building or maintaining security automation solutions and orchestrating multiple security tools to support scalable security operations.

Strong hands-on experience with enterprise-grade perimeter security technologies , including Cloudflare and firewall management.

Experience in adversary simulation exercises is highly preferred.

Preferred Qualifications:

Experience conducting security assessments in cloud environments.

Familiarity with threat emulation frameworks and attack simulation methodologies.

Strong communication skills with the ability to clearly articulate findings and remediation recommendations to technical and non-technical stakeholders

In the event that you haven’t received any updates after 3 weeks, your data will be kept and we may contact you for another career destination. Meanwhile, discover more about tiket.com on Instagram , LinkedIn , or YouTube .