Sr Security Engineer (Offensive)

We think you also hate when travel app is giving you a headache, right? A slight misinformation can ruin the trip.

That is exactly what we are tackling as t-fam! Making sure that our 50+ million users have the best experience in crafting their own adventure.

Your main duties in flying with us: 

• Conduct log analysis and able to present the findings to the stakeholders

• Develop automation scripts and security tools using Python, Go, Bash, or similar programming languages.

• Build and maintain security automation workflows, including the orchestration of security tools through RESTful APIs, to improve efficiency and support security pipelines.

• Collaborate with the Infrastructure teams and Engineering teams to remediate identified vulnerabilities and strengthen overall security posture.

• Simulate advanced attack scenarios to identify and validate security weaknesses.

• Stay up to date with the latest offensive security techniques, tools, and threat landscape.

Mandatory belongings that you must prepare: 

• Minimum 5 years of experience in offensive security, cybersecurity engineering, network security, or a related cybersecurity field.

• Solid understanding of vulnerability assessment methodologies, exploitation techniques, and security testing tools.

• Proficiency in Python, Go, Bash, or other scripting languages, including experience integrating and automating workflows through RESTful APIs.

• Experience building or maintaining security automation solutions and orchestrating multiple security tools to support scalable security operations.

• Strong hands-on experience with enterprise-grade perimeter security technologies, including Cloudflare and firewall management.

• Experience in adversary simulation exercises is highly preferred.

Preferred Qualifications:

• Experience conducting security assessments in cloud environments.

• Familiarity with threat emulation frameworks and attack simulation methodologies.

• Strong communication skills with the ability to clearly articulate findings and remediation recommendations to technical and non-technical stakeholders

In the event that you haven’t received any updates after 3 weeks, your data will be kept and we may contact you for another career destination. Meanwhile, discover more about tiket.com on Instagram, LinkedIn, or YouTube.