DevSecOps Engineer

Job Description

Job ID: MJ000157

Traveloka is a technology company based in Indonesia. Founded in 2012 by ex-Silicon Valley engineers and aims to revolutionize human mobility with technology. Today Traveloka is expanding its reach by operating in multiple countries and experimenting with new endeavors that will create a large impact in the markets and industries we touch.

Job Description

The Security Engineer - DevSecOps role is central to building secure, resilient systems within Traveloka's technical infrastructure. This position focuses on integrating security practices within the development, deployment, and operational environments, emphasizing a strong foundation in reliability, infrastructure, and automation. As part of the Information Security team, you will collaborate with engineering and infrastructure teams to uphold security standards, ensuring robust practices across the organization.

You'll work closely with cross-functional teams and collaborate with peers from diverse backgrounds in technology, consulting, product management, and academia. The environment fosters openness, encouraging everyone to contribute ideas, influence team directions, and continuously grow. This role provides exposure to a startup-like experience as we expand throughout Southeast Asia and develop new products.

Responsibilities

• Design, build, improve, and maintain automated infrastructure-as-code (IaC) solutions using Terraform, focusing on reliability, scalability, and security within deployment pipelines.
• Maintained the security scanning pipeline, including static and dynamic analysis and dependency checks.
• Collaborate with central infrastructure teams to design and implement standardized reliability and security practices organization-wide.
• Assist in vulnerability patching or improve security within infrastructure and services, collaborating with engineering teams as needed.
  
  

Qualifications

• Experience in reliability or security roles, such as security engineer, infrastructure engineer, DevSecOps engineer, or a similar position.
• Familiarity with cloud infrastructure and CI/CD practices.
• Familiarity with Terraform, AWS, and GCP for infrastructure automation.
• Experience with observability, monitoring, and automation tools.
• Strong desire for continuous learning and growth.
• Ability to work both independently and collaboratively with remote peers.
• Strong written and verbal English communication skills.
  
  

Nice to Have

• Active involvement in infrastructure or security communities, conferences, or open-source contributions.
• Experience with dependency management tools, CVE analysis, and software bill of materials.
• Knowledge of automated testing methodologies, including static, dynamic, and runtime.
• Experience in software development, infrastructure management, or coding.
• Experience creating reusable libraries or components for software or infrastructure development (Java/JavaScript preferred).