Sr Security Engineer I (Defensive/Blue Team)

GTN_IDN PT Global Tiket Network; Indonesia; On-site; IDR 240,000,000 - 480,000,000; Full time

Job summary

tiket.com, a leading Indonesian online travel platform, is seeking a security engineer to advance its defensive security program. You will conduct log analysis, build automation scripts, and orchestrate security tools via RESTful APIs to strengthen defenses.

The role requires 5+ years in security engineering, experience with vulnerability assessments, Python/Go/Bash scripting, and hands-on work with perimeter security (Cloudflare, firewalls).

Qualifications

• 5+ years of defensive security or cybersecurity engineering experience.
• Strong knowledge of vulnerability assessment methodologies and testing tools.
• Proficiency in Python, Go, Bash, and RESTful API integration.
• Experience building security automation workflows and tooling.
• Hands-on with enterprise perimeter security, including Cloudflare and firewalls.

Responsibilities

• Conduct log analysis and present findings to stakeholders.
• Develop automation scripts and security tools using Python, Go, Bash, or similar.
• Build and maintain security automation workflows via RESTful APIs.
• Collaborate with Infrastructure and Engineering to remediate vulnerabilities.
• Stay updated on offensive security techniques and threat landscape.
• Simulate advanced attack scenarios to identify weaknesses.

Skills

Log analysis

Security automation

Python scripting

Go scripting

Bash scripting

RESTful APIs

Stakeholder communication

Tools

Cloudflare

Firewalls

Job description

We think you also hate when travel app is giving you a headache, right? A slight misinformation can ruin the trip. That is exactly what we are tackling as t-fam! Making sure that our 50+ million users have the best experience in crafting their own adventure.

Your main duties in flying with us:

• Conduct log analysis and able to present the findings to the stakeholders
• Develop automation scripts and security tools using Python, Go, Bash, or similar programming languages.
• Build and maintain security automation workflows, including the orchestration of security tools through RESTful APIs, to improve efficiency and support security pipelines.
• Collaborate with the Infrastructure teams and Engineering teams to remediate identified vulnerabilities and strengthen overall security posture.
• Stay up to date with the latest offensive security techniques, tools, and threat landscape.
• Simulate advanced attack scenarios to identify and validate security weaknesses.

Mandatory belongings that you must prepare:

• Minimum 5 years of experience in defensive security, cybersecurity engineering, network security, or a related cybersecurity field.
• Solid understanding of vulnerability assessment methodologies, exploitation techniques, and security testing tools.
• Proficiency in Python, Go, Bash, or other scripting languages, including experience integrating and automating workflows through RESTful APIs.
• Experience building or maintaining security automation solutions and orchestrating multiple security tools to support scalable security operations.
• Strong hands-on experience with enterprise-grade perimeter security technologies, including Cloudflare and firewall management.
• Experience in adversary simulation exercises is highly preferred.

Preferred Qualifications:

• Experience conducting security assessments in cloud environments.
• Familiarity with threat emulation frameworks and attack simulation methodologies.
• Strong communication skills with the ability to clearly articulate findings and remediation recommendations to technical and non-technical stakeholders

In the event that you haven’t received any updates after 3 weeks, your data will be kept and we may contact you for another career destination. Meanwhile, discover more about tiket.com on Instagram, LinkedIn, or YouTube.

tiket.com is the pioneer of online travel agent (OTA) in Indonesia established in 2011. tiket.com is one of the largest and most comprehensive online travel companies in Indonesia, offering a full spectrum of travel products and services core to the travel experience, ranging from flights, ground transport, accommodations, attractions, activities, event ticketing, and travel essentials. tiket.com’s mission is to accommodate the best access for online travel booking through web and mobile applications. In 2017, tiket.com became an affiliated company of Blibli and by 2021 became a consolidating subsidiary of Blibli. Blibli has a unified omnichannel ecosystem known as Blibli Tiket, consisting of its subsidiary entities, tiket.com, and Ranch Market. This is to emphasize the synergies within the ecosystem that provide convenience and added value for customers by offering more comprehensive, beneficial, and integrated services across every channel and platform. In 2022, Blibli’s shares were officially listed and traded on the Indonesia Stock Exchange (“IDX”) under the stock code "BELI." tiket.com is the fastest-growing OTA in the world by Sabre and rated the fastest Net Promoter Score (NPS) growth for OTA among its peers, according to a survey done by Jakpat. going anywhere? tiket.com!