Security Engineer - Product Security

Overview

Product Security Engineer at Traveloka will be required to ensure that our products and services are shipped with high security standards through application security testing, hardening, and secure framework. A Product Security Engineer will be smart and self starter. The person needs to find unique ways to understand complex software architecture and should be able to perform manual security code review. They need to be able to integrate security in the software development process with defense-in-depth strategies such as automated testing in CI / CD pipeline. A Product Security Engineer preferably needs to have a software development background and should have practical programming knowledge.

Responsibilities

• With limited guidance, completes manual and automated review of source code to identify security vulnerabilities and risks
• Defines and designs overall vulnerability assessment & penetration testing strategy on web API, front-end service, internal RPC, and mobile application
• Conducts security planning, defines testing scope, timeline, focus and budget for automated security testing tools implementation, hardening and secure framework such as RASP, WAF, safe library, security decorator functions, and their deployment within continuous integration systems
• Provides effective recommendations and influence implementation to mitigate and improve security vulnerabilities in all projects of own domain and others
• Leads investigation of possible security incident related to application security such as payment abuse or sensitive data exposure via web API
• Defines strategy and plan to develop in-house tools to integrate with SDLC and to track and derive security metrics

Qualifications

Seniority level

Employment type

Job function

Industries

We’re unable to determine exact job location from the original posting; this description references Traveloka roles and responsibilities as provided.

#J-18808-Ljbffr