Senior Security Engineer

About Privy Privy is Indonesia's market leader in Digital Signature and Digital Identity, with more than 40 million users and 2.600 enterprise clients.
Our Digital Signature is acknowledged by the Ministry of Communication and Informatics.
We have just closed our Series C funding led by KKR on November 2022.
We are growing more rapidly than ever, and would love to have talented and enthusiastic individuals onboard.
Job Responsibilities: Perform vulnerability assessments and penetration testing on infrastructure, mobile applications, and web applications.
Collaborate with cross-functional teams to define, design, and implement new security features.
Work closely with the core development team to integrate security features and improvements.
Develop automation processes for product security and compliance, including configuration baselines, patching, key management, and more.
Participate in developing foundational capabilities within the Software Development Life Cycle (SDLC), including process setup, metric systems, and reviewing automation requirements.
Collaborate with development and DevOps teams to integrate mobile app security assessment tools into the development lifecycle.
Job Requirements: Minimum of 3 years in offensive security roles.
In-depth knowledge of mobile security techniques, common vulnerabilities, and mitigations.
Strong understanding of application security standards and practices, such as ASVS, MASVS, WSTG, and MSTG.
Experience with CI/CD tools such as Jenkins and GitLab CI.
Understanding of standards and frameworks for vulnerability scanning and penetration testing, such as OSSTMM, OWASP, and PTES.
Familiarity with reverse engineering tools such as IDA Pro, Ghidra, and Frida.
Certifications such as OSCP, eMAPT, eWPTX, eWPT, CRTP, CEH, or similar are a plus.
Strong team player with excellent communication skills and the ability to work independently.
#J-18808-Ljbffr