Total 3 technical engineer job vacancies in Batam, Batam City

About the Role 

The Security Engineer plays a crucial role in Amartha. You will be the warrior who will spearhead various Information Security programs to protect Amartha from internal and external threats.

About the team

The Information Security team in Amartha is a group of dynamic, highly-analytical  individuals who are highly mindful in driving security and privacy by design within the various aspects of product lifecycle and engineering processes. We are the team who are highly passionate to be the security enabler of Amartha’s systems

Job Desc/What will you do

• Identify current and emerging technology issues including security trends, vulnerabilities and threats through various security assessment activities (including but not limited to: . penetration testing, vulnerability assessment, etc)
• Recognize complex technical issues and managing them within a fast-paced business environment
• Perform proactive investigation to analyze security weaknesses and recommend appropriate strategies
• Perform Threat intelligence activities
• Work closely with internal and external teams to implement security solutions
• Acquire and implement new technological solutions to enhance organizational security posture
• Identify, define and document system security requirements and recommend solutions
• Monitor systems for irregular behavior and set up preventive measures
• Manage bug bounty program
• Enhance the effectiveness of security related processes through automation and orchestration

Requirements

• 5+ years of related job experience
• Excellent analytical and interpersonal skills
• Ability to express technical information clearly at different organizational levels
• Having relevant certification are preferable (e.g.  CEH,OSCP, eCPPT, Ejpt etc)
• Advance knowledge in  API Security, Mobile/Application Security, Cloud Security
• Advance knowledge in security adversarial techniques, tactics, and procedures
• Experienced in conducting Static Application Security Test (SAST) and Dynamic Application Security Test (DAST)
• Experienced in scripting using Python, Bash, Go
• Highly skilled with strong hands-on experience with various security assessment tools such as Metasploit, BurpSuite, ZAP, OWASP tools, Hydra, Netsparker, Wireshark, Apktool, nikto, Cloudbrute , Kali Linux tools, Frida, MobSF, or comparable technologies
• Familiar with Cloud Platform such as GCP, AWS 
• Tools familiarity : Python, Bash, TerraFrom, Ansible, GitHub, Jenkins, Artifactory, Jira, Terraform, Git, BurpSuite, Hydra, Nessus, NMap, Metasploit, Frida, MobSF

About the role

As our next Quality Assurance, you will get a chance to help our customer, by recommending improvements, and develop automation to scale our testing process. You will actively collaborate with Product Managers, Engineering, and DevOps to help Amartha to deliver innovative and delightful user experiences.

Responsibilities

• Improving, enhancing, automating: acting as a catalyst for change and improvement in performance and quality
• Create test automation script for API and UI automation to improve the regression test efficiency
• Create load-test script to assess the scalability of our system
• Create security scan test to detect vulnerability of our system
• Analyze bugs and errors found during tests
• Recommend improvements in software to enhance user experience
• Motivate the development process for efficiency and performance
• Works together with the software developer to enhance and improve program

• Bachelor’s degree (Preferably Computer Science / Information Technology)
• Has a minimum of 3 years experience in the related field
• Experience with testing and testing automation tools: Robot Framework, Katalon Studio, Locust, Artillery, Browserstack, ZAP
• Experience with API testing automation, UI Automation, Loadtest, and Security Scan
• Knowledge and understanding of modern development techniques, branching strategies (gitflow, feature branches / flags, trunk-based development) and CI/CD
• Understanding the need for testing automation at all levels: from database to UI
• Possesses good problem solving skills (able to identify problems and find simple solutions). Able to think out-of-the-box
• Fun to work with and a team player
• Eager to learn (self-learning and from others), share and grow
• Self motivated and able to inspire and motivate people

About the Role 

The Senior Cloud Security Engineer plays a crucial role in Amartha. You will be the warrior who will spearhead various Information Security programs to protect Amartha from internal and external threats.

About the team

The Information Security team in Amartha is a group of dynamic, highly-analytical  individuals who are highly mindful in driving security and privacy by design within the various aspects of product lifecycle and engineering processes. We are the team who are highly passionate to be the security enabler of Amartha’s systems

Job Desc/What will you do

• Identify current and emerging technology issues including security trends, vulnerabilities and threats over the cloud-based infrastructure
• Recognize complex technical issues and managing them within a fast-paced business environment
• Perform proactive investigation to analyze security weaknesses and recommend appropriate strategies
• Perform Threat intelligence activities
• Work closely with internal and external teams to implement security solutions
• Acquire and implement new technological solutions to enhance organizational security posture
• Identify, define and document system security requirements and recommend solutions
• Monitor systems for irregular behavior and set up preventive measures
• Enhance the effectiveness of cloud security related processes through automation and orchestration

Requirements

• 5+ years of related job experience
• Excellent analytical and interpersonal skills
• Ability to express technical information clearly at different organizational levels
• Having relevant certification are preferable 
• Familiarity with Cloud Security concepts, principles, and technologies
• Familiar with Cloud Platform such as GCP, AWS 
• Experienced in scripting using Python, Bash scripting
• Familiar with a variety of DevSecOps toolkits, including Ansible, Jenkins, Artifactory, Jira, Terraform, Git/Version Control Software, or comparable technologies
• Familiar with a variety of Pentesting toolkits, including BurpSuite, Hydra, Nessus, NMap, Metasploit, Frida, MobSF, or comparable technologies
• Experience in deploying, managing, and maintaining ELK Stack
• Tools familiarity : Python, Bash, TerraFrom, Ansible, GitHub, Jenkins, Artifactory, Jira, Terraform, Git, Nessus, NMap, Metasploit