Security Engineer

About the Role
This job position is suitable for individuals who are constant learners, problem solvers and multi-taskers. Candidates who enjoy a fast-paced environment and are able to deliver results are welcomed to apply. The job scope includes Implementation, Operations and Maintenance of Security Solutions and Enterprise SAAS Applications and Cloud infrastructure.

What You Will Do

• Implement and maintain the security controls in Google Workspace (G-Suite) or Office365 and Enterprise Applications
• Implement and maintain cloud, network and endpoint security solutions
• Collaborate with other IT professionals to harden enterprise systems and applications, including OS and application patching
• Provide advisory support related security on security solutions and enterprise applications 
• Work with the cyber security incident response team and the cyber security operations center to improve the security posture of the company
• Plan, create, and implement cybersecurity processes and policies
• Engage in domain-specific threat modeling and attack surface analysis/reduction
• Identify information and logs to monitor and help integrate with SIEM

What You Will Need

• At least 2 years of hands-on experience in managing network, infrastructure, managed service in AWS, Azure and/or GCP
• At least 2 years of hands-on experience in managing Google Workspace (G-Suite) and/or Office 365
• At least 2 years of hands-on experience in cybersecurity
• Good knowledge of at least one operating system: Linux, Windows, MacGood understanding of networking will be more preferable: TCP/IP, IP addresses, HTTP, DNSGood knowledge of security concepts (OS and Application Hardening)
• Good knowledge of Security Email Gateway (SEG), and able to make integration with other email domains and maintain email security daily operation
• Able to do email forensic for malicious email and/or Business Email Compromises (BEC)
• Able to design, deploy and maintain Secure Access Service Edge (SASE) solution
• Has scripting skill (Powershell, Bash, Python, NodeJs, etc)
• Good documentation, reporting and communication skills

About the Team
Gojek Information Security function is responsible for providing a secure and trustworthy ecosystem, delivering a world-class product security capability while ensuring compliance and, last but not least, making Gojek the safest cyber workplace for our GoTroops.
About Us
Gojek is a Super App. It’s one app for ordering food, commuting, digital payments, shopping, hyper-local delivery, and dozen other products. It is Indonesia’s first and only decacorn. It's also the only Southeast Asian startup to be part of Fortune's list of 'Companies That Changed The World.'
Our Mission: To create and scale positive socio-economic impact for our customers, driver-partners, business and MSMEs.
As of 2021, Gojek processed more than $9 billion annualised gross transaction value across all markets where it operates - in Singapore, Thailand, Vietnam and Indonesia. We have the largest food delivery product in Asia, (outside of China), and the largest payments wallet in Southeast Asia.
Our investors include Google, Facebook, PayPal, Sequoia Capital, Tencent Holdings among others.
Gojek is committed to building a diverse and inclusive workplace and is an equal opportunity employer. We do not discriminate on the basis of race, religion, national origin, gender, gender identity, sexual orientation, disability, age, education status, or any other legally protected status.