At PINTU, We are building the #1 crypto investment platform to focus on new investors in Indonesia and Southeast Asia. We know that 99% of new investors are underserved because existing solutions cater to the 1% who are pros and early adopters hence we built an app that helps them to learn, invest and sell cryptocurrencies in one click away.

We’re looking for a Lead Application Security Engineer to join our Cyber Security team to harden and protect Pintu’s application and services. This role is a subject matter expert in Application Security.

What You’ll Be Doing

You will drive the security responsibilities for PINTU’s applications and services by setting up Application Security from ground up. You will be one of the founding members of the security team.

In this role, you will:

• Own and run Application Security tools and processes. That includes
  • SAST/DAST/SCA/… scanners
  • Secure code reviews
  • Threat-modeling
  • Penetration testing APIs/web/mobile apps
  • Bug-bounty program
  • Secure SDLC
• Innovate and build tools that automate the detection of security issues and processes
• Write security libraries and harden existing internal libraries for developers' consumption
• Build standards and guides and deliver training for developers to write secure code
• Be a trusted security advisor to engineering teams

Why You Should Join Us

• Opportunity to defend against the great volume of real-world attacks in one of the hottest industries
• Exposure to the blockchain technology and securing its application
• Team up with the top engineering team in a supportive environment for your career growth and personal well-being
• Flexibility to work from anywhere

What you’ll need

• 5+ years of hands-on experience in Application Security
• Be an expert in security basics and penetration testing of webAPIs, web and mobile applications
• Experience in conducting secure code reviews
• Interest and knowledge to code using Go/Python/NodeJS
• Passion for automation and an eye for details
• Skills to solve problems with effective communication and a sense of drive
• OSCP/OSWE certification is a plus
• Prior experience in blockchain-related stack is a plus
  

Let’s Realise a Cryptocurrency Bank for Everyone!

We are building the #1 cryptocurrency bank for everyone to accelerate the transition to an open financial system

We have impacted many lives but there’s still plenty to do and we can’t do it alone. You can learn more about us

What is PINTU?

PINTU is a blockchain-based digital investment app that focuses on new investors. We have created a user-friendly app that helps new investors to learn, buy and invest cryptocurrency one click away.

Our agility and firm hold on our core purpose and values have allowed us to remain resilient and thrive through tumultuous times.

Learn more about PINTU here.

Please mention the word **WHOOA** and tag RNTQuOTQuMTIzLjE0OA== when applying to show you read the job post completely (#RNTQuOTQuMTIzLjE0OA==). This is a beta feature to avoid spam applicants. Companies can search these words to find applicants that read this and see they're human.