Sr. Security Engineer

We think you also hate when travel app is giving you a headache, right? A slight misinformation can ruin the trip.

That is exactly what we are tackling as t-fam! Making sure that our 50+ million users have the best experience in crafting their own adventure.

Your main duties in flying with us:

• Security Analysis and Incident Response:
• Investigate and respond to security incidents, ensuring timely and effective resolution
• Conduct thorough security log analysis to identify vulnerabilities and potential threats
• Perform risk scoring based on OWASP Risk Rating and/or CVSS
• Defensive Technologies:
• Utilize and manage security defensive technologies such as SIEM, WAF, and Bot Management tools
• Implement and maintain security measures to protect the organization's assets
• Programming and Technical Skills:
• Apply programming skills to develop and implement security solutions (automation)
• Conduct regular code reviews to ensure security best practices are followed
• Communication and Presentation:
• Prepare detailed reports on security assessments, incidents, and mitigation strategies
• Deliver clear and concise presentations to stakeholders on security findings and recommendations
• Nice to Have:
• Experience with techniques, tactics, and mitigation strategies as outlined by MITRE ATT&CK
• Familiarity with fulfilling PCI DSS and ISO 27001 compliance requirements
• Relevant certifications such as GCIH or GMON
• Have working knowledge of programming / scripting experience such as golang or python
  
  
  

Mandatory belongings that you must prepare:

• Minimum of 6+ years of experience in the field of cybersecurity (defensive)
• Proven experience in programming and security vulnerability management
• Ability to perform risk scoring and assessments using OWASP Risk Rating and/or CVSS
• Hands-on experience with security defensive technologies
• Strong written and verbal communication and presentation skills
• Demonstrated experience in security incident response and investigation
• Hands-on experience on managing cloud security perimeter
  
  
  

In the event that you haven’t received any updates after 3 weeks, your data will be kept and we may contact you for another career destination. Meanwhile, discover more about tiket.com on Instagram, LinkedIn, or YouTube.