Total 6 quality assurance engineer job vacancies in Bandung, Bandung City

Memastikan penerapan ISO 9001, ISO 14001 dan ISO 45001 dapat berjalan dengan baik

About the Role 

The Security Engineer plays a crucial role in Amartha. You will be the warrior who will spearhead various Information Security programs to protect Amartha from internal and external threats.

About the team

The Information Security team in Amartha is a group of dynamic, highly-analytical  individuals who are highly mindful in driving security and privacy by design within the various aspects of product lifecycle and engineering processes. We are the team who are highly passionate to be the security enabler of Amartha’s systems

Job Desc/What will you do

• Identify current and emerging technology issues including security trends, vulnerabilities and threats through various security assessment activities (including but not limited to: . penetration testing, vulnerability assessment, etc)
• Recognize complex technical issues and managing them within a fast-paced business environment
• Perform proactive investigation to analyze security weaknesses and recommend appropriate strategies
• Perform Threat intelligence activities
• Work closely with internal and external teams to implement security solutions
• Acquire and implement new technological solutions to enhance organizational security posture
• Identify, define and document system security requirements and recommend solutions
• Monitor systems for irregular behavior and set up preventive measures
• Manage bug bounty program
• Enhance the effectiveness of security related processes through automation and orchestration

Requirements

• 5+ years of related job experience
• Excellent analytical and interpersonal skills
• Ability to express technical information clearly at different organizational levels
• Having relevant certification are preferable (e.g.  CEH,OSCP, eCPPT, Ejpt etc)
• Advance knowledge in  API Security, Mobile/Application Security, Cloud Security
• Advance knowledge in security adversarial techniques, tactics, and procedures
• Experienced in conducting Static Application Security Test (SAST) and Dynamic Application Security Test (DAST)
• Experienced in scripting using Python, Bash, Go
• Highly skilled with strong hands-on experience with various security assessment tools such as Metasploit, BurpSuite, ZAP, OWASP tools, Hydra, Netsparker, Wireshark, Apktool, nikto, Cloudbrute , Kali Linux tools, Frida, MobSF, or comparable technologies
• Familiar with Cloud Platform such as GCP, AWS 
• Tools familiarity : Python, Bash, TerraFrom, Ansible, GitHub, Jenkins, Artifactory, Jira, Terraform, Git, BurpSuite, Hydra, Nessus, NMap, Metasploit, Frida, MobSF

About the role

As our next Quality Assurance, you will get a chance to help our customer, by recommending improvements, and develop automation to scale our testing process. You will actively collaborate with Product Managers, Engineering, and DevOps to help Amartha to deliver innovative and delightful user experiences.

Responsibilities

• Improving, enhancing, automating: acting as a catalyst for change and improvement in performance and quality
• Create test automation script for API and UI automation to improve the regression test efficiency
• Create load-test script to assess the scalability of our system
• Create security scan test to detect vulnerability of our system
• Analyze bugs and errors found during tests
• Recommend improvements in software to enhance user experience
• Motivate the development process for efficiency and performance
• Works together with the software developer to enhance and improve program

• Bachelor’s degree (Preferably Computer Science / Information Technology)
• Has a minimum of 3 years experience in the related field
• Experience with testing and testing automation tools: Robot Framework, Katalon Studio, Locust, Artillery, Browserstack, ZAP
• Experience with API testing automation, UI Automation, Loadtest, and Security Scan
• Knowledge and understanding of modern development techniques, branching strategies (gitflow, feature branches / flags, trunk-based development) and CI/CD
• Understanding the need for testing automation at all levels: from database to UI
• Possesses good problem solving skills (able to identify problems and find simple solutions). Able to think out-of-the-box
• Fun to work with and a team player
• Eager to learn (self-learning and from others), share and grow
• Self motivated and able to inspire and motivate people

About the Role 

The Senior Cloud Security Engineer plays a crucial role in Amartha. You will be the warrior who will spearhead various Information Security programs to protect Amartha from internal and external threats.

About the team

The Information Security team in Amartha is a group of dynamic, highly-analytical  individuals who are highly mindful in driving security and privacy by design within the various aspects of product lifecycle and engineering processes. We are the team who are highly passionate to be the security enabler of Amartha’s systems

Job Desc/What will you do

• Identify current and emerging technology issues including security trends, vulnerabilities and threats over the cloud-based infrastructure
• Recognize complex technical issues and managing them within a fast-paced business environment
• Perform proactive investigation to analyze security weaknesses and recommend appropriate strategies
• Perform Threat intelligence activities
• Work closely with internal and external teams to implement security solutions
• Acquire and implement new technological solutions to enhance organizational security posture
• Identify, define and document system security requirements and recommend solutions
• Monitor systems for irregular behavior and set up preventive measures
• Enhance the effectiveness of cloud security related processes through automation and orchestration

Requirements

• 5+ years of related job experience
• Excellent analytical and interpersonal skills
• Ability to express technical information clearly at different organizational levels
• Having relevant certification are preferable 
• Familiarity with Cloud Security concepts, principles, and technologies
• Familiar with Cloud Platform such as GCP, AWS 
• Experienced in scripting using Python, Bash scripting
• Familiar with a variety of DevSecOps toolkits, including Ansible, Jenkins, Artifactory, Jira, Terraform, Git/Version Control Software, or comparable technologies
• Familiar with a variety of Pentesting toolkits, including BurpSuite, Hydra, Nessus, NMap, Metasploit, Frida, MobSF, or comparable technologies
• Experience in deploying, managing, and maintaining ELK Stack
• Tools familiarity : Python, Bash, TerraFrom, Ansible, GitHub, Jenkins, Artifactory, Jira, Terraform, Git, Nessus, NMap, Metasploit

Job Description

• Design and develop services that deliver impact every day.
• Operate and maintain highly scalable services.
• Develop tools to improve the existing process, including infrastructure reliability, service performance, and developer's productivity.
• Continuously improve code quality, product execution, and learning experience.
• Coordinate across teams (Mobile, Frontend, DevOps, Data, Product, QA etc.) on planning and execution.
• Solve challenging financial access problems in Indonesia by using cutting-edge technology.

• Has min. 5 years of experience in the related field
• Fast learner & good analytical thinking.
• Advanced knowledge in (according to priorities) Go Language.
• Have exposure to architectural patterns of high-scale web application.
• Have experience with distributed storage and database systems, including SQL or NoSQL.
• Have a systematic problem-solving approach and knowledge of algorithms, data structures, and complexity analysis.
• Good communication skill, team player and comfortable working with a cross-functional team.
• Have a passion for learning, improving and contributing to projects with a strong sense of ownership.
• Have experience with TDD.
• Have experience with refactoring large systems.
• Have experience with event driven architecture.
• Would be a plus if you have experienced with Kafka, Kubernetes, Grafana, Prometheus.

• Plan and carry out preventive maintenance throughout the hotel to ensure standards are maintained for guest comfort.
• Prioritize and carry out maintenance as requested by departments on a daily basis to ensure the smooth running of all hotel departments.
• Record meter readings and liaise with the General/Hotel Manager regarding options to improve energy management and conservation in keeping with Gaia  Commitments.
• Be responsible for the testing of fire alarms, emergency lighting etc. on a routine basis as required by local Council and Fire Service.
• Liaise with the General/Hotel Manager and Regional Engineer regarding use of contractors within the Hotel, controlling expenditure and ensuring work is to the standard required by the company and manufacture specifications.
• Ensure the cost effective and hygienic removal of rubbish from the hotel areas and monitor to ensure areas are clear and free of offensive odor.
• Be available to carry out emergency maintenance work outside of normal working hours, as required for full power failure, evacuation fire system re-set and/or failure of mechanical systems.
• Maintain records of repair work and daily checks as required by local Council, Government and Manufacturer specifications.
• Liaise closely with Front Desk and Housekeeping regarding out of service rooms to expedite a quick turn around and return to inventory.
• Ensure the external areas of the hotel are maintained in line with company brand standards.
• Research, recommend and liaise with the General Manager regarding procedures to improve the overall efficiency of the department and to carry out project work/prepare reports as requested by the General Manager.
• Ensure all staff are competent in the safe and effective use of equipment and chemicals in accordance with the manufacturer’s instructions.
• Attend and actively participate in daily meetings respecting the confidentiality of issues, which may be discussed formally or informally.
• Prepare monthly Maintenance reports, commenting on key performance indicators and action taken to keep on target.