Sr Security Engineer I (Defensive/Blue Team)

tiket.com; Jakarta Pusat; On-site; IDR 350,000,000 - 650,000,000; Full time

Job summary

tiket.com is seeking an experienced Security Engineer to join our team in Jakarta. You will conduct log analysis, develop automation scripts, and build security workflows by orchestrating tools through RESTful APIs.

Collaboration with Infrastructure and Engineering will be essential to remediate vulnerabilities and strengthen security posture. The role emphasizes staying current with offensive security techniques, simulating advanced attack scenarios, and applying enterprise perimeter security

Qualifications

• Minimum 5 years of experience in defensive security, cybersecurity engineering, or a related cybersecurity field.
• Solid understanding of vulnerability assessment methodologies, exploitation techniques, and security testing tools.
• Proficiency in Python, Go, Bash, or other scripting languages, including experience integrating and automating workflows through RESTful APIs.
• Experience building or maintaining security automation solutions and orchestrating multiple security tools to support scalable security operations.
• Strong hands‑on experience with enterprise‑grade perimeter security technologies, including Cloudflare and firewall management.
• Experience in adversary simulation exercises is highly preferred.

Responsibilities

• Conduct log analysis and present findings to stakeholders.
• Develop automation scripts and security tools using Python, Go, Bash, or similar languages.
• Build and maintain security automation workflows via RESTful APIs.
• Collaborate with Infrastructure and Engineering teams to remediate vulnerabilities.
• Stay up to date with offensive security techniques, tools, and threat landscape.
• Simulate advanced attack scenarios to identify and validate security weaknesses.

Skills

Python

Go

Bash

RESTful APIs

Vulnerability assessment

Security automation

Cloudflare

Firewall management

Adversary simulation

Job description

n We think you also hate when travel app is giving you a headache, right? A slight misinformation can ruin the trip. That is exactly what we are tackling as t-fam! Making sure that our 50+ million users have the best experience in crafting their own adventure.

Your Main Duties In Flying With Us

• Conduct log analysis and able to present the findings to the stakeholders
• Develop automation scripts and security tools using Python, Go, Bash, or similar programming languages.
• Build and maintain security automation workflows, including the orchestration of security tools through RESTful APIs, to improve efficiency and support security pipelines.
• Collaborate with the Infrastructure teams and Engineering teams to remediate identified vulnerabilities and strengthen overall security posture.
• Stay up to date with the latest offensive security techniques, tools, and threat landscape.
• Simulate advanced attack scenarios to identify and validate security weaknesses.

Mandatory Belongings That You Must Prepare

• Minimum 5 years of experience in defensive security, cybersecurity engineering, network security, or a related cybersecurity field.
• Solid understanding of vulnerability assessment methodologies, exploitation techniques, and security testing tools.
• Proficiency in Python, Go, Bash, or other scripting languages, including experience integrating and automating workflows through RESTful APIs.
• Experience building or maintaining security automation solutions and orchestrating multiple security tools to support scalable security operations.
• Strong hands‑on experience with enterprise‑grade perimeter security technologies, including Cloudflare and firewall management.
• Experience in adversary simulation exercises is highly preferred.

Preferred Qualifications

• Experience conducting security assessments in cloud environments.
• Familiarity with threat emulation frameworks and attack simulation methodologies.
• Strong communication skills with the ability to clearly articulate findings and remediation recommendations to technical and non-technical stakeholders

In the event that you haven’t received any updates after 3 weeks, your data will be kept and we may contact you for another career destination. Meanwhile, discover more about tiket.com on Instagram, LinkedIn, or YouTube.

n