Product Security Engineer
4 days ago
**Description**:
Funding Societies | Modalku is the largest SME digital financing platform in Southeast Asia, expanding into a leading SME neobank. We are licensed and registered in Singapore, Indonesia, Thailand, Malaysia, and operating in Vietnam, and backed by Sequoia India, Softbank Vision Fund and SMBC bank amongst many others. Funding Societies | Modalku provides business financing to small and medium-sized enterprises (SMEs), which is funded by individual and institutional investors. And here at Funding Societies | Modalku we live by our core values:
- Serve with Obsession: Build win-win relationships for the long-term by having a customer obsession.
- Grow Relentlessly: Strive to become our best, most authentic selves.
- Enable Teamwork, Disable Politics: Only by forging togetherness, we help each other succeed.
- Test Measure Act: Stay curious and reinvent ourselves, through innovation and experimentation.
- Focus on Impact: Create impact through bias for action and tangible results.
**Requirements**:
Funding Societies is looking for a Product Security Engineer to join our growing Security team.
As a Product Security Engineer focused predominantly on Static Application Security Testing (SAST) and threat modelling, you will mainly be responsible for securing our software products. You will also be responsible for raising security awareness in our organisation. You will work with multiple stakeholders throughout the Software Development Life Cycle to identify security threats early and develop solutions to mitigate them. You would strengthen the existing security architecture reviews and manual / automated secure code reviews (SAST) capabilities in the team. You will also work with external security vendors and researchers in various security programs.
**Key responsibilities**:
- Conduct design and secure architecture reviews.
- Conduct manual and automated secure code reviews.
- Conduct threat modelling and penetration testing.
- Manage security bugs, including working with the relevant stakeholders to get the security bugs fixed according to the service level agreement.
- Raise security awareness, primarily in Engineering teams, by conducting security awareness trainings, secure code review trainings and discussions.
- Develop security tools, including monitoring tools, and build custom integration with various third-party security tools.
**Required qualifications**:
- A degree in Computer Science, Software Engineering, Information System, or related fields.
- 3+ years of experience in Web/Mobile Application Security (secure code reviews and secure architecture reviews).
- Knowledge around existing threat modelling frameworks, such as STRIDE and PASTA. Threat modelling as Code.
- Be well-versed in microservices architecture and possess extensive experience in Product Security (web and mobile).
- Basic knowledge around Continuous Integration (CI) pipelines and platforms, such as CircleCI and GitHub actions.
- Extensive experience in threat modelling, vulnerability assessment, and penetration testing.
- Good security knowledge, preferably in web and mobile security.
- Good understanding about software design and architecture.
- Web/Mobile development background will be an added advantage.
- Basic knowledge around software composition analysis, supply chain security issues (dependency confusion), and Supply chain Levels for Software Artefacts (SLSA) levels will be an added advantage.
- Good understanding about programming language, and is well-versed in any popular scripting languages, such as Python or JavaScript.
- Good communication skills, both written and verbal.
- Security certifications, such as OSWE (Advanced Web Attacks and Exploitation) will be an added advantage.
**Benefits**:
- Time off - We would love you to take time off to rest and rejuvenate. We offer flexible paid vacations as well as many other observed holidays by country. We also like to have our people take a day off for special days like birthdays and work anniversaries.
- Flexible Working - We believe in giving back the control of work & life to our people. We trust our people and love to provide the space to accommodate each and everyone's working style and personal life.
- Medical Benefits - We offer health insurance coverage for our employees and dependents. Our people focus on our mission knowing we have their back for their loved ones too.
- Mental Health and Wellness - We understand that our team productivity is directly linked to our mental and physical health. Hence we have Wellness Wednesdays and we engage partners to provide well-being coaching. And we have our Great FSMK Workout sessions too to keep everyone healthy and fit
- Tech Support - We provide a company laptop for our employees and the best possible support for the right equipment/tools to enable high productivity
-
Python Engineer
4 days ago
Jakarta, Indonesia Autobahn Security Full time**About Autobahn Security** Autobahn Security is a technology start-up with a vision to make cybersecurity and vulnerability management accessible to all businesses. Our SaaS product has been developed by some of the world's finest cybersecurity researchers and experts. Our SaaS tool allows both cybersecurity experts and non-experts to embark on a journey...
-
Security Engineer
7 months ago
Jakarta, Indonesia Autobahn Security Full time**About Autobahn Security** Autobahn Security is a technology start-up with a vision to make cybersecurity and vulnerability management accessible to all businesses. Our SaaS product has been developed by some of the world's finest cybersecurity researchers and experts. Our SaaS tool allows both cybersecurity experts and non-experts to embark on a journey...
-
Python Engineer for Cyber Security Product
7 days ago
Jakarta, Indonesia Autobahn Security GmbH Full timeAbout Autobahn Security Autobahn Security is a technology start-up with a vision to make cybersecurity and vulnerability management accessible to all businesses. Our SaaS product has been developed by some of the world’s finest cybersecurity researchers and experts. Our SaaS tool allows both cybersecurity experts and non-experts to embark on a journey to...
-
Security Engineer
7 months ago
Jakarta, Indonesia Autobahn Security GmbH Full timeAbout Autobahn Security Autobahn Security is a technology start-up with a vision to make cybersecurity and vulnerability management accessible to all businesses. Our SaaS product has been developed by some of the world’s finest cybersecurity researchers and experts. Our SaaS tool allows both cybersecurity experts and non-experts to embark on a journey to...
-
Product Security Engineer
9 months ago
Jakarta, Indonesia Funding Societies Full time**Description**: **Funding Societies | Modalku** is the largest SME digital financing platform in Southeast Asia. We are licensed in Singapore, Indonesia, Thailand, and registered in Malaysia. We are backed by Sequoia India and Softbank Ventures Asia Corp amongst many others and provides business financing to small and medium-sized enterprises (SMEs), which...
-
Engineering Manager
4 days ago
Jakarta, Indonesia Autobahn Security Full time**About Autobahn Security** Autobahn Security is a technology start-up with a vision to make cybersecurity and vulnerability management accessible to all businesses. Our SaaS product has been developed by some of the world's finest cybersecurity researchers and experts. Our SaaS tool allows both cybersecurity experts and non-experts to embark on a journey...
-
Head of Product Security Engineering
7 months ago
Jakarta, Indonesia Mekari (PT. Mid Solusi Nusantara) Full timeMekari is Indonesia's no. 1 Software-as-a-Service (SaaS) company. Our mission is to empower businesses and professionals to progress effortlessly. Our products (Mekari Talenta, Mekari Jurnal, Mekari KlikPajak, & Mekari Qontak) have been used by tens of thousands of businesses in Indonesia. To reach millions, we need more people like you: entrepreneurs,...
-
Senior Product Security Engineer
2 months ago
Jakarta, Indonesia Mekari (PT. Mid Solusi Nusantara) Full timeMekari is Indonesia's no. 1 Software-as-a-Service (SaaS) company. With our ecosystem of software solutions—including Mekari Jurnal, Mekari Talenta, Mekari Qontak, and Mekari Flex, we aim to facilitate entrepreneurs and leaders as they accelerate the digital transformation of their businesses. In our 10+ years of journey we have reached over 1 Million...
-
Product Security Engineer
4 months ago
Jakarta, Indonesia Funding Societies | Modalku Group Full timeFunding Societies | Modalku is the largest SME digital financing platform in Southeast Asia. We are licensed in Singapore, Indonesia, Thailand, and registered in Malaysia and operates in Vietnam. We are backed by Sequoia India and Softbank Ventures Asia Corp amongst many others and provides business financing to small and medium-sized enterprises (SMEs),...
-
Cyber Security Engineer
2 days ago
Jakarta, Indonesia PT NOOSC SECURITY GLOBAL Full timeCyber Security Engineer Kualifikasi - Memiliki pengalaman satu tahun di Perusahaan IT. - Memiliki Pendidikan Strata satu Sistem Komputer/Teknik Komputer. - Memiliki keterampilan dalam Network Devices dan Security Firewall. - Terbiasa dan mahir untuk mengelola System Administrator / System Engineer serta dokumentasi teknis. - Diutamakan dapat menangani...
-
Cyber Security Engineer
9 months ago
Jakarta, Indonesia PT NOOSC SECURITY GLOBAL Full timeSecurity Engineer (bukan satpam/anggota) Kualifikasi - Memiliki pengalaman satu tahun di Perusahaan IT. - Memiliki Pendidikan Strata satu Sistem Komputer/Teknik Komputer. - Memiliki keterampilan dalam Network Devices dan Security Firewall. - Terbiasa dan mahir untuk mengelola System Administrator / System Engineer serta dokumentasi teknis. - Diutamakan...
-
Cyber Security Engineer
9 months ago
Jakarta, Indonesia PT NOOSC SECURITY GLOBAL Full timeSecurity Engineer (bukan satpam/anggota) Kualifikasi - Memiliki pengalaman dua tahun di Perusahaan IT. - Memiliki Pendidikan Strata satu Sistem Komputer/Teknik Komputer. - Memiliki keterampilan dalam Network Devices dan Security Firewall. - Terbiasa dan mahir untuk mengelola System Administrator / System Engineer serta dokumentasi teknis. - Diutamakan dapat...
-
Security Engineer
2 weeks ago
Jakarta, Indonesia PT NOOSC SECURITY GLOBAL Full time**Kualifikasi** - Memiliki pengalaman dua tahun di Perusahaan IT. - Memiliki Pendidikan Strata satu Sistem Komputer/Teknik Komputer. - Memiliki keterampilan dalam Network Devices dan Security Firewall. - Terbiasa dan mahir untuk mengelola System Administrator / System Engineer serta dokumentasi teknis. - Diutamakan dapat menangani perangkat Network...
-
Security Engineer
2 weeks ago
Jakarta, Indonesia PT NOOSC SECURITY GLOBAL Full timeKualifikasi - Memiliki pengalaman dua tahun di Perusahaan IT. - Memiliki Pendidikan Strata satu Sistem Komputer/Teknik Komputer. - Memiliki keterampilan dalam Network Devices dan Security Firewall. - Terbiasa dan mahir untuk mengelola System Administrator / System Engineer serta dokumentasi teknis. - Diutamakan dapat menangani perangkat Network Security. -...
-
Senior Data Engineer
7 months ago
Jakarta, Indonesia Autobahn Security Full time**About Autobahn Security** Autobahn Security is a technology start-up with a vision to make cybersecurity and vulnerability management accessible to all businesses. Our SaaS product has been developed by some of the world's finest cybersecurity researchers and experts. It allows both cybersecurity experts and non-experts to embark on a journey to implement...
-
Product Security Engineer
5 days ago
Jakarta, Indonesia GO-JEK Full time**About the Role** A product security engineer is a go-to expert in one or more information security disciplines with an expertise wide understanding of security architecture, processes, alignment to stakeholder teams, and accountability for effective measurement of security metrics. H/she should have prior experience in leading and executing large and...
-
Security Engineer Cyber Security
6 days ago
Jakarta, Indonesia PT NOOSC SECURITY GLOBAL Full timeBUKAN UNTUK SATPAM **Kualifikasi** **- Memiliki pengalaman dua tahun di Perusahaan IT.** - Memiliki Pendidikan Strata satu Sistem Komputer/Teknik Komputer. - Memiliki keterampilan dalam Network Devices dan Security Firewall. - Terbiasa dan mahir untuk mengelola System Administrator / System Engineer serta dokumentasi teknis. **- Diutamakan dapat menangani...
-
Product Security Manager
2 months ago
Jakarta, Indonesia Mekari (PT. Mid Solusi Nusantara) Full timeMekari is Indonesia's no. 1 Software-as-a-Service (SaaS) company. With our ecosystem of software solutions—including Mekari Jurnal, Mekari Talenta, Mekari Qontak, and Mekari Flex, we aim to facilitate entrepreneurs and leaders as they accelerate the digital transformation of their businesses. In our 10+ years of journey we have reached over 1 Million...
-
Head of Security Engineering
5 days ago
Jakarta, Indonesia Mekari (PT. Mid Solusi Nusantara) Full timeMekari is Indonesia's no. 1 Software-as-a-Service (SaaS) company. Our mission is to empower businesses and professionals to progress effortlessly. Our products (Mekari Talenta, Mekari Jurnal, Mekari KlikPajak, Mekari Qontak and Mekari e-Sign that have been used by tens of thousands of businesses in Indonesia. To reach millions, we need more people like you:...
-
Engineering Manager
2 weeks ago
Jakarta, Indonesia Autobahn Security GmbH Full timeAbout Autobahn Autobahn is a technology start-up with a vision to make cybersecurity and vulnerability management accessible to all businesses. Our SaaS product has been developed by some of the world’s finest cybersecurity researchers and experts. Our SaaS tool allows both cybersecurity experts and non-experts to embark on a journey to implement...