Security Engineer - Offensive Security Team (SDE 2) -
Kredivo Group9 days ago
Jakarta, IndonesiaMid Level
Responsibilities
- Conduct vulnerability assessments and penetration tests on infrastructure, web applications, and mobile applications.
- Use Metasploit, Burp Suite, Nmap, and similar tools to identify security weaknesses and potential exploits.
- Perform security reviews and attack simulations from an external attacker perspective.
- Prepare reports describing findings, risks, and recommended mitigation strategies.
- Communicate security results to technical teams, management, and other stakeholders.
- Collaborate with IT and engineering teams to prioritize and remediate vulnerabilities.
- Assist with implementing security controls and best practices.
- Integrate security tools into development and CI/CD pipelines for automated security testing and validation.
- Develop Python and PowerShell scripts and tools to streamline security operations.
Requirements
- Bachelor’s degree, preferably in IT or computing, is preferred but not mandatory.
- Experience with vulnerability assessment and penetration testing for web applications, mobile applications, and infrastructure.
- Experience with AWS and GCP environments.
- Understanding of OSSTMM, OWASP, PTES, or similar vulnerability scanning and penetration testing standards and frameworks.
- OSCP or an equivalent penetration testing certification is a plus.
- English and Vietnamese language proficiency.
- Ability to work independently, lead security initiatives, analyze complex security issues, communicate clearly, produce security documentation, and collaborate cross-functionally.
Tech Stack
Categories
About Kredivo Group
Kredivo Group builds digital consumer finance products in Southeast Asia, including instant credit for e-commerce and offline purchases, personal loans, and neobank services. It operates the brands Kredivo, KrediFazz, Krom Bank in Indonesia, GajiGesa, and Timo in Vietnam. The company is privately held and backed by investors such as Mizuho Bank, Amazon, Square Peg Capital, Asia Partners, Cathay Innovation, Jungle Ventures, and Mirae Asset.