Senior Cloud Security Engineer

About the Role
If you’re looking to be a part of a dynamic, highly-analytical team who enjoys working closely with cloud infrastructure systems and security, look no further. As a Cloud Security Engineer for GoTo, you will be handed the reins in security for GoTo. Along with the Products, Engineering and other related teams, you will be in charge of building, maintaining, and improving security measures to ensure our environment and applications are secure from threats. The cherry on top: you’ll get to be a part of a team that works as a security enabler of our system.

What You Will Do

• Promote security engineering practices, drive technical strategy and roadmaps especially in cloud security area
• Communicate and collaborate effectively with key stakeholders and collaborators among the Engineering team in a global environment, including other engineers, product managers to identify and solve challenging problems, creating amazing engineering experience for our internal engineering teams
• Mentor and provide advice to junior engineers, guiding them in making secure and sound architectural decisions, and helping them out of their comfort zone
• Implement various security controls on our environments based on international standards and best practices
• Implement technical solution for product and engineering team to mitigate security and compliance related findings
• Participate in Vulnerability and Incident Management activities (e.g: response & handling, mitigation, escalation, reporting, etc) if necessary
• Develop, maintain, and operates various tools and systems that support security programs and activities
• Assist the devops team in implementing best practices for infrastructure operations, software build and deployment

What You Will Need

• Should have at least 5 years experience in designing, developing, testing, deploying, and managing large scale security solutions based on GCP, AWS, and Alicloud 
• Familiar with Linux and *nix System and proven track record on managing cloud infrastructure (e.g. GCP, AWS)
• Hands-on experience with automation system (e.g. Chef, Ansible) and orchestration system (e.g Docker, Kubernetes)
• Hands-on experience with various security systems (WAF, IDS, etc)
• Hands-on experience with various scripting and programming languages (Python, bash, Golang, etc)
• Excellent written & verbal communication skills focused on improving collaboration, understanding, and information exchange across all stakeholders
• Experience in building developer facing applications is a plus
• Bonus point for experience in web application or API penetration testing

About the Team
The Cloud Security team in GoTo is responsible for driving security and privacy by design within the Infrastructure lifecycle and engineering processes besides continuously researching and responding to evolving threats which could impact GoTo product’s viability to service its customers and remain compliant to the local laws and regulations as amicable.As a team, we’re concerned not only with the growth of the company, but each other’s personal and professional growths, too. Along with a common drive to jump over technical barriers and provide sustainable solutions, our team bonds over our shared love for coffee, movies, and TV shows.
About GoTo GroupGoTo Group is the largest digital ecosystem in Indonesia with its mission to “Empower Progress’ by offering technological infrastructure and solutions for everyone to access and thrive in the digital economy. The GoTo ecosystem consists of on-demand transportation services, e-commerce, food and grocery delivery, logistics and fulfillment, as well as financial and payment services through the Gojek, Tokopedia and GoTo Financial platforms.It is the first platform in Southeast Asia that hosts these crucial cases in a single ecosystem, capturing the majority of Indonesia’s vast consumer household.
About Gojek Gojek is Southeast Asia’s leading on-demand platform and pioneer of the multi-service ecosystem with over 2.5 million driver partners across the regions offering a wide range of services such as transportation, food delivery, logistics and more. With its mission to create impact at scale, Gojek is committed to resolving consumer problems and raising standards of living by connecting consumers to the best providers of goods and services in the market.
About GoTo FinancialGoTo Financial accelerates financial inclusion through its leading financial services and merchants solutions. Its consumer services include GoPay and GoPayLater and serve businesses of all sizes through Midtrans, Moka, GoBiz Plus, GoBiz, and Selly. With its trusted and inclusive ecosystem of products, GoTo Financial is open to new growth opportunities and aims to empower everyone to Make It Happen, Make It Together, Make It Last.
About Tokopedia  Tokopedia is an Indonesian technology company with a mission to democratize commerce through technology. It has been a driving force behind Indonesia's digital development since its foundation in 2009, with more than 99% of districts and empowered around 12 million merchants listed nationwide. With Nakama ranging all across Indonesia, Tokopedia aims to simplify the lives of many to #FindYourPurpose together.


GoTo and its business units, including Gojek, Tokopedia, GoToFinancial and GoToLogistics ("GoTo") only post job opportunities on our official channels on our respective company websites and on LinkedIn. GoTo is not liable for any job postings or job offers that did not originate from us. You should conduct your own due diligence to prevent being victims of any fake job scams, if they did not originate from GoTo's official recruitment channels.