Security Engineer (SDE-1) Pluang is Indonesia's leading multi-asset investment platform, offering products such as Crypto, US stocks, mutual funds, and gold. As one of the fastest-growing fintech platforms in Indonesia, we empower users to achieve financial independence through a seamless, innovative, and secure investment experience. We're hiring a Security Engineer (SDE-1) to join our security team and help us secure the next generation of fintech products. This is a great role for someone early in their security career who wants hands-on exposure to detection engineering, incident response, and cloud security in a fast-moving fintech environment, working closely with senior engineers on the team.

Application Security (AppSec)
Work on static and dynamic application security testing (SAST/DAST) across codebases and applications under guidance.
Conduct API security testing and review REST/GraphQL endpoints for authorization and authentication flaws.
Support secure code reviews and help identify common software vulnerabilities (OWASP Top 10) in development pipelines.
Work with engineering teams to triage, track, and remediate application security vulnerabilities.
Assist in integrating security tooling and guardrails into CI/CD pipelines and developer workflows.
Security Operations Center (SOC)
Monitor security alerts and dashboards (SIEM/EDR/WAF) and triage based on defined playbooks and runbooks.
Support senior engineers in investigating and responding to security incidents, escalating per runbook when needed.
Participate in rotational on-call/shift coverage as part of the security operations team.

0–2 years of experience with, or strong academic/project exposure to: BurpSuite, OWASP ZAP, SIEM, EDR, and log management platforms (Elasticsearch, OpenSearch, Splunk, Wazuh, CrowdStrike, Sentinel, etc.).

- API & Web Security: Solid understanding of REST/GraphQL API security,



common vulnerabilities, and authentication/authorization mechanisms (e.g., Depth in Mobile Application Security (MASVS standards, basic Android/iOS reverse engineering, energetic analysis).
- Familiarity with secure coding principles and code review practices in common languages like Java, Python, Go, Rust etc.
- Solid fundamentals in networking and operating systems (TCP/IP, DNS, Linux/Windows internals) and how common attacks exploit them.
- Basic scripting ability (Python or Bash) to support automation and log analysis.
- Exposure to SIEM/log analysis concepts (e.g., Elasticsearch, OpenSearch, Splunk, Wazuh) through coursework, labs, internships, or personal projects.
- Strong willingness to learn, good analytical and problem-solving skills, and the ability to work collaboratively with compliance, risk, and engineering teams.
- A degree in Computer Science, Information Security, or a related field, or equivalent Offensive security or AppSec certifications/practical experience (e.g., Willingness to work in a rotational/on-call shift schedule as part of the security operations team.

Good to Have Experience / Skills
Hands-on exposure to DevSecOps tools and pipeline security integration (e.g., Exposure to EDR tools (CrowdStrike, Sentinel) and WAF solutions (Cloudflare, Akamai, AWS WAF), and how detection policies are tuned.
Exposure to cloud environments (AWS/GCP/Azure) and basic cloud logging concepts (e.g., CloudTrail, Security Command Center).
Exposure to SOAR platforms and security automation.
Familiarity with container and Kubernetes monitoring/logging concepts.
Prior internship or project experience in a SOC, blue team, or security operations setting.
We are an equal-opportunity employer and value diversity at our company. We do not discriminate based on race, religion, colour, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

📌 Senior AWS Security Engineer (Gurugram)
🏢 Pluang
📍 Gurugram