Deskripsi Pekerjaan
Are you ready to secure the future of quick commerce and food delivery across the globe? As a Staff Security Engineer at Foodpanda, you will join our global Security Engineering team. Your mission will be to safeguard our digital ecosystem, protecting three powerhouse brands: foodpanda, foodora, and Yemeksepeti.
In this high-impact, leadership-oriented technical role, you will design, build, and scale security platforms and guardrails that empower our engineering teams to ship secure code rapidly. You will act as a principal technical authority, bridging the gap between product engineering and security infrastructure, ensuring robust defense-in-depth mechanisms are deeply integrated into our multi-region cloud environments. By leveraging automation, modern DevSecOps tooling, and threat modeling, you will play a key role in shaping our long-term security strategy.
We are looking for a visionary security leader who thrives in dynamic, high-scale cloud environments and loves solving complex architecture, automation, and threat mitigation challenges. If you are passionate about fostering a proactive security culture and driving technical excellence, this is the perfect opportunity to make a massive impact on millions of users across Asia and Europe.
Tanggung Jawab
- Lead the design, architecture, and implementation of scalable security tooling and infrastructure across multi-cloud environments (AWS/GCP).
- Define and drive the roadmap for our DevSecOps programs, integrating automated security testing (SAST, DAST, SCA) seamlessly into CI/CD pipelines.
- Act as a subject matter expert on application security, threat modeling, cloud architecture, and secure coding practices for engineering teams across three brands.
- Conduct deep-dive architecture reviews and threat assessments on core infrastructure, container deployments (Kubernetes), and microservices.
- Build custom security detection and mitigation tools using modern programming languages (Go, Python, or Ruby).
- Mentor junior and senior security engineers, promoting a culture of technical excellence and continuous learning.
- Partner with Incident Response and Compliance teams to proactively identify vulnerabilities and implement robust remediation strategies.
Kualifikasi
- Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related technical field, or equivalent practical experience.
- 8+ years of dedicated experience in security engineering, with at least 2 years in a Staff or Principal capacity in high-growth tech companies.
- Deep expertise in securing modern cloud infrastructure (specifically AWS) and containerized environments (Kubernetes, Docker).
- Proficiency in at least one programming language (Go, Python, Java) with a strong capability to build custom security automation tools.
- Strong experience with CI/CD automation and integrating security controls natively into deployment pipelines.
- Excellent communication and stakeholder management skills, with a proven ability to translate complex security risks into clear business impacts.
- Industry-recognized security certifications (e.g., AWS Certified Security Specialty, CISSP, CCSP, OSCP) are highly advantageous.