Sr Security Engineer (Offensive)
We think you also hate when travel app is giving you a headache, right? A slight misinformation can ruin the trip.
That is exactly what we are tackling as t-fam! Making sure that our 50+ million users have the best experience in crafting their own adventure.
Your main duties in flying with us:
Conduct log analysis and able to present the findings to the stakeholders
Develop automation scripts and security tools using Python, Go, Bash, or similar programming languages.
Build and maintain security automation workflows, including the orchestration of security tools through RESTful APIs, to improve efficiency and support security pipelines.
Collaborate with the Infrastructure teams and Engineering teams to remediate identified vulnerabilities and strengthen overall security posture.
Simulate advanced attack scenarios to identify and validate security weaknesses.
Stay up to date with the latest offensive security techniques, tools, and threat landscape.
Mandatory belongings that you must prepare:
Minimum 5 years of experience in offensive security, cybersecurity engineering, network security, or a related cybersecurity field.
Solid understanding of vulnerability assessment methodologies, exploitation techniques, and security testing tools.
Proficiency in Python, Go, Bash, or other scripting languages, including experience integrating and automating workflows through RESTful APIs.
Experience building or maintaining security automation solutions and orchestrating multiple security tools to support scalable security operations.
Strong hands-on experience with enterprise-grade perimeter security technologies, including Cloudflare and firewall management.
Experience in adversary simulation exercises is highly preferred.
Preferred Qualifications:
Experience conducting security assessments in cloud environments.
Familiarity with threat emulation frameworks and attack simulation methodologies.
Strong communication skills with the ability to clearly articulate findings and remediation recommendations to technical and non-technical stakeholders
In the event that you haven’t received any updates after 3 weeks, your data will be kept and we may contact you for another career destination. Meanwhile, discover more about tiket.com on Instagram, LinkedIn, or YouTube.