Job ID: MJ000256

About Traveloka

Traveloka is Southeast Asia's leading travel and lifestyle super-app. We connect tens of millions of travellers across the region with flights, hotels, experiences, financial services, and more — all from a single platform. Since our founding in 2012, we have expanded to eleven markets, processed billions of dollars in transactions, and built one of the most recognised consumer brands in the region.

We move fast because the region demands it. Southeast Asia is young, mobile-first, and growing faster than almost anywhere else on earth. We are not transplanting a Western playbook — we are writing a new one, from scratch, for a market that does not look like anywhere else — and we are calling for people who want to be part of that.

About the Team

Information Security at Traveloka protects one of Southeast Asia's largest travel platforms — millions of travellers, their payments, and their trust across 11 markets. We are the team that lets hundreds of engineers ship fast without shipping risk: building secure-by-default infrastructure, hunting threats in real time, and setting the standards every product team is held to. As we scale and as AI becomes native to how we build, the attack surface grows and our work only gets more critical.

Here you defend at genuine scale and own outcomes, not tickets. Whether you are hardening systems through security engineering or running detection and response in security operations, you will make decisions that move the whole company. If you want your security work to matter to real people across the region, you will fit right in.

About the Job

As a Lead, You are the technical authority on Security Operations, defining the detection and response strategy that determines how Traveloka identifies and contains threats across its cloud and production environments at scale.

• Define and drive the detection and response strategy for Traveloka's Security Operations function, identifying the monitoring investments, detection engineering standards, and automation capabilities that will determine the team's effectiveness at the next order of scale
• Architect and deliver the most complex security monitoring and automation programs the team takes on — detection frameworks, incident response platforms, and operational tooling that the entire SecOps function depends on
• Identify systemic gaps in Traveloka's security monitoring coverage and incident response capability
• Lead cross-functional improvement programs that produce lasting structural change in how the organisation detects and responds to threats
• Act as the senior technical authority in cross-functional security discussions with engineering, infrastructure, and product leadership, providing the credibility and reasoning that informs consequential security architecture and operational decisions
• Shape Traveloka's post-incident review culture, ensuring every significant security event produces systemic improvements rather than one-time fixes, and that lessons learned are embedded into detection and response capabilities
• Define how AI tools are integrated into Security Operations workflows at a strategic level, establishing the standards for responsible adoption and modeling the judgment that separates genuine operational acceleration from security risk

Job Requirements

• You have at least 6 years of relevant experience in security operations, detection engineering, or incident response at scale.
• You are recognised technical authority on cloud security monitoring, detection engineering, and incident response at scale
• You have deep expertise in SIEM, SOAR, EDR, and CSPM tooling
• You design and build production-grade security automation in Python or equivalent
• You have defined detection engineering standards or built security monitoring capabilities adopted across an engineering organisation
• You have been the technical lead resolving major security incidents for a high-traffic consumer platform
• You can weigh operational, financial, and risk trade-offs in your security decisions and defend them with data
• You communicate clearly to both security and business leadership
• You have bachelor's degree in Computer Science, Information Security, or related field.
• You influence senior engineers and cross-functional leaders through technical credibility — your detection frameworks and incident analyses are the ones the organisation learns from
• You use AI tooling with sophistication while maintaining the verification rigor that security demands
• You have built something that outlasted your direct involvement — a detection framework, response playbook, or operational standard
• Your work is something the team still relies on after you moved on to the next challenge

Join Us

If you have read this far and felt something click — the problem, the scale, the moment — we would like to hear from you.

We review every application. If your background is a strong fit, you will hear from us within 5 business days.

We are building the kind of company where strong people choose to stay because the work keeps getting bigger and better. If that is what you are looking for, apply.