At Stockbit & Bibit, we prioritize the security of our applications and the data of our users. As an Application Security Engineer, you will play a vital role in ensuring the security and integrity of our software and systems. You will work closely with our development teams to identify and remediate security vulnerabilities, conduct penetration testing, and implement best practices to safeguard our applications and infrastructure.

Responsibilities

• Secure Code Review: Conduct thorough code reviews to identify and address security flaws, including vulnerabilities like SQL injection, cross-site scripting (XSS), and insecure direct object references (IDOR).
• Security Testing: Design and execute various security tests, such as penetration testing, vulnerability scanning, and static/dynamic analysis, to proactively uncover weaknesses in the application.
• Threat Modeling: Collaborate with development teams to identify potential threats and vulnerabilities, assess their impact, and develop effective mitigation strategies.
• Bug Bounty: Triage and validate bug reports submitted by external researchers.
• Security Architecture: Provide guidance on secure architecture and design patterns to ensure that security is built into the application from the ground up.
• Incident Response: Assist in the investigation and remediation of security incidents, working to minimize the impact and prevent future occurrences.
• Security Awareness: Educate development teams about security best practices and promote a culture of security within the organization.
• Stay Informed: Keep up-to-date with the latest security trends, vulnerabilities, and attack techniques to ensure the application remains protected against evolving threats.

• Bachelor's degree in Computer Science, Engineering, or a related field.
• At least 3 years of experience in application security, secure coding practices, and vulnerability management.
• Strong understanding of web application vulnerabilities, OWASP Top 10, and modern attack vectors.
• Hands-on experience with web application security testing tools such as Burp Suite, OWASP ZAP, etc.
• Experience with secure coding practices and common programming languages (e.g., Java, Python, NodeJS).
• Knowledge of cloud security principles and best practices.
• Certifications such as CISSP, CEH, or OSCP are a plus.
• Strong problem-solving and analytical skills.
• Excellent communication and collaboration abilities to work effectively with cross-functional teams.

• Capital market sharing session
• Self development program
• Health insurance benefits
• Well being and counseling program

About the Role 

The Senior Cloud Security Engineer plays a crucial role in Amartha. You will be the warrior who will spearhead various Information Security programs to protect Amartha from internal and external threats.

About the team

The Information Security team in Amartha is a group of dynamic, highly-analytical  individuals who are highly mindful in driving security and privacy by design within the various aspects of product lifecycle and engineering processes. We are the team who are highly passionate to be the security enabler of Amartha’s systems

Job Desc/What will you do

• Identify current and emerging technology issues including security trends, vulnerabilities and threats over the cloud-based infrastructure
• Recognize complex technical issues and managing them within a fast-paced business environment
• Perform proactive investigation to analyze security weaknesses and recommend appropriate strategies
• Perform Threat intelligence activities
• Work closely with internal and external teams to implement security solutions
• Acquire and implement new technological solutions to enhance organizational security posture
• Identify, define and document system security requirements and recommend solutions
• Monitor systems for irregular behavior and set up preventive measures
• Enhance the effectiveness of cloud security related processes through automation and orchestration

Requirements

• 5+ years of related job experience
• Excellent analytical and interpersonal skills
• Ability to express technical information clearly at different organizational levels
• Having relevant certification are preferable 
• Familiarity with Cloud Security concepts, principles, and technologies
• Familiar with Cloud Platform such as GCP, AWS 
• Experienced in scripting using Python, Bash scripting
• Familiar with a variety of DevSecOps toolkits, including Ansible, Jenkins, Artifactory, Jira, Terraform, Git/Version Control Software, or comparable technologies
• Familiar with a variety of Pentesting toolkits, including BurpSuite, Hydra, Nessus, NMap, Metasploit, Frida, MobSF, or comparable technologies
• Tools familiarity : Python, Bash, TerraFrom, Ansible, GitHub, Jenkins, Artifactory, Jira, Terraform, Git, Nessus, NMap, Metasploit

Kualifikasi:

• Berusia maksimal 30 tahun
• Pendidikan minimal S1 semua jurusan.
• Berpengalaman di bidang SALES minimal 3 tahun
• Menguasai area Jabodetabek
• Siap bekerja sesuai dengan target
• Mampu bekerja baik secara individu maupun dalam tim
• Memiliki kemampuan komunikasi dan negosiasi yang baik 
• Menguasai penjualan melalui sosial media.
• Berpengalaman di bidang Retail Penjualan Sepeda Motor atau di bidang Smartphone
• Bersedia bekerja mobile dan sudah terbiasa bekerja di lapangan
• Dapat bergabung secepatnya

Tugas dan tanggung jawab:

• Melakukan penjualan produk
• Membuat penawaran harga dan proposal untuk pembukaan toko/dealer baru
• Menjangkau prospek customer potensial 
• Berkolaborasi dengan team untuk membangun ide dan rencana untuk setiap event yang akan dilaksanakan
• Mengkoordinasi dan memantau event yang sedang berjalan
• Bertanggung jawab atas perencanaan renovasi toko sampai selesai
• Merencanakan dan mengelola kegiatan pelatihan dan pengembangan secara menyeluruh untuk memastikan peningkatan penjualan tiap toko di setiap bulannya 
• Melakukan evaluasi pelatihan untuk menilai efektivitas kerja tim 
• Mencapai target hasil penjualan yang disepakati
• Melakukan peningkatan penjualan dengan metode promosi marketing terbaru 
• Bertanggung jawab atas target penjualan di setiap toko 
• Melakukan jaminan pelayanan terbaik

• Operator Cutting Gas
• Deskripsi : Proses Pemotongan plat besi menggunakan gas, mengoprasikan crane

Operator Machining Alat Berat

Deskripsi : proses membentuk produk/meterian menggunakan machintools, 

Sesuai dengan Job Deskripsi Pekerjaan

Operator Bending Alat Berat

Deskripsi : menekuk plat besi dengan ukuran yang sudah ditentukan, mengoprasikan crane.

Sesuai dengan Job Deskripsi Pekerjaan

Operator Chamfer Alat Berat

Deskripsi : membentuk sudut dengan ukuran yang sudah ditentukan, mengoprasikan crane.

Sesuai dengan Job Deskripsi Pekerjaan

Sesuai dengan Job Deskripsi Pekerjaan

Sesuai dengan Job Deskripsi Pekerjaan

Sesuai dengan Job Deskripsi Pekerjaan

Sesuai dengan Job Deskripsi Pekerjaan

Sesuai dengan Job Deskripsi Pekerjaan

Sesuai dengan Job Deskripsi Pekerjaan

Sesuai dengan Job Deskripsi Pekerjaan

Sesuai dengan Job Deskripsi Pekerjaan

Sesuai dengan Job Deskripsi Pekerjaan

Sesuai dengan Job Deskripsi Pekerjaan

Sesuai dengan Job Deskripsi Pekerjaan

Sesuai dengan Job Deskripsi Pekerjaan

Sesuai dengan Job Deskripsi Pekerjaan

Sesuai dengan Job Deskripsi Pekerjaan

Sesuai dengan Job Deskripsi Pekerjaan