Security Engineering Manager

Security Engineering Manager page is loaded

Security Engineering Manager

Apply locations Singapore - Local Office time type Full time posted on Posted Today job requisition id R0006620

It's fun to work in a company where people truly BELIEVE in what they're doing!

Job Description

As a leading travel technology company, Traveloka manages a vast ecosystem of APIs, microservices, cloud infrastructures, and front-end applications (web and mobile) that serve millions of users worldwide. On the back side, we operate large-scale data pipelines and internal business operations, many are engineered in-house, which require robust security measures to protect user data, intellectual property, and sensitive corporate information.

The Security Engineering Manager will take a holistic approach to safeguarding our engineering assets, working and managing across multiple teams including DevSecOps, Product Security, and Offensive Security. Success in this role requires strong analytical, problem-solving, and leadership abilities, as well as the capacity to think from defensive, offensive, and engineering perspectives to craft tailored security solutions for our unique environment. The ideal candidate will not only be proficient in using readily available or off-the-shelf tools but will also have the expertise to assess when and how custom security tools need to be developed and maintained with a software engineering perspective to address specific challenges.

Requirements

1. Proven experience managing Security Engineering or Software Engineering teams, with at least 7 years of extensive expertise in cybersecurity.
2. Strong background in leading cybersecurity or software development projects using agile methodologies.
3. Experience securing applications in fast-paced environments with frequent changes.
4. Proficient in general-purpose programming languages (e.g., Python) and Object-Oriented Programming (e.g., Java).
5. Hands-on experience with cloud platforms like AWS and GCP, including platform-specific security features and common security tools.
6. Familiarity with modern technologies such as containerization, managed container services, serverless functions, infrastructure as code, API gateways, BFF (Backend for Frontend), CI/CD, and microservices.
7. Deep technical knowledge of web, mobile, OS, and network security.
8. Able to practically demonstrate various security tests and control implementation such as SAST, DAST, SCA, WAF, secure-by-design, and secure application framework.
9. Excellent verbal and written communication skills.
10. Strong self-initiative to bridge gaps between Software Engineering, Infrastructure Engineering, and Security Engineering, while providing a security framework for the entire technology team and management.
11. Commitment to cybersecurity with a dedication to continuous learning and staying updated on new technologies.
12. Experience in CTF, bug bounty programs, presenting at security conferences, or publications is a plus.
13. Experience with penetration testing, red teaming, or purple teaming is a plus.
14. Web development experience or developing security tools is a plus.
15. Relevant technical security certifications (e.g., Offensive Security, CREST, SANS GIAC) are a plus.

If you like wild growth and working with happy, enthusiastic over-achievers, you'll enjoy your career with us!

About Us

We don’t innovate for the sake of innovation, we utilize technology to simplify people’s lives so they can enjoy their lives better. That belief is what brought Traveloka to be Southeast Asia’s Leading Travel Platform. Traveloka serves 20+ products that include comprehensive travel services. From transportations to accommodations, discovering nearby attractions, and insurance products to financial services, including the groundbreaking ‘Buy Now Pay Later’.

With 100+ millions downloads in six countries across the SEA region, we aim to keep exploring for better innovations—all to fulfill our users’ travel aspirations so they can enjoy their lives, their way.

Our vision is to enrich people’s life by empowering them in fulfilling their unique travel aspirations, seamlessly.