Job Description

We think you also hate when travel app is giving you a headache, right? A slight misinformation can ruin the trip.

That is exactly what we are tackling as t-fam! Making sure that our 50+ million users have the best experience in crafting their own adventure.

Your main duties in flying with us:

• Conduct log analysis and able to present the findings to the stakeholders
• Develop automation scripts and security tools using Python, Go, Bash, or similar programming languages.
• Build and maintain security automation workflows, including the orchestration of security tools through RESTful APIs, to improve efficiency and support security pipelines.
• Collaborate with the Infrastructure teams and Engineering teams to remediate identified vulnerabilities and strengthen overall security posture.
• Stay up to date with the latest offensive security techniques, tools, and threat landscape.
• Simulate advanced attack scenarios to identify and validate security weaknesses.

Mandatory belongings that you must prepare:

• Minimum 5 years of experience in defensive security, cybersecurity engineering, network security, or a related cybersecurity field.
• Solid understanding of vulnerability assessment methodologies, exploitation techniques, and security testing tools.
• Proficiency in Python, Go, Bash, or other scripting languages, including experience integrating and automating workflows through RESTful APIs.
• Experience building or maintaining security automation solutions and orchestrating multiple security tools to support scalable security operations.
• Strong hands-on experience with enterprise-grade perimeter security technologies, including Cloudflare and firewall management.
• Experience in adversary simulation exercises is highly preferred.

Preferred Qualifications:

• Experience conducting security assessments in cloud environments.
• Familiarity with threat emulation frameworks and attack simulation methodologies.
• Strong communication skills with the ability to clearly articulate findings and remediation recommendations to technical and non-technical stakeholders

In the event that you haven’t received any updates after 3 weeks, your data will be kept and we may contact you for another career destination. Meanwhile, discover more about tiket.com on Instagram, LinkedIn, or YouTube.