AI SOC Engineer

• AI SOC Engineer
• Zentara Technologies
• | Gading Serpong, Tangerang, Indonesia | Full-time, On-site
• About Zentara

Zentara Technologies is a cybersecurity and enterprise technology company headquartered in Tangerang, Indonesia, with a regional office in Singapore. We run a 24/7 Managed SOC on top of them for institutions where downtime carries real consequences.

Our operations are certified to ISO 27001 for information security and ISO 42001 for AI management. Our R&D arm, Zentara Labs, moves research into production, and our SOC feeds real operational data back into the lab. You would work at exactly that intersection.

The Role

We are hiring a Security Engineer to advance the AI and automation layer of our detection and response stack, and to stand behind the SOC when incidents demand engineering depth.

Half the job is building. You will develop & maintain AI features and automation for SIEM and you will help build SOAR, our security orchestration, automation, and response platform currently in development. The other half is operational. When the SOC needs technical or forensic support during an active incident, that call comes to you.

• This is a builder role with production accountability. What you ship, the SOC runs. Every day.
• What You Will Do
• Design, build, and tune AI features for the SIEM platform: anomaly detection models, contextual threat scoring, and automated alert triage

Develop SOAR from its current state toward production: response playbooks, case management workflows, and automated containment actions integrated with SIEM

Build and maintain integrations across the stack: log sources, EDR, threat intelligence feeds, ticketing, and patch management. Integrate with 200+ data sources, and you will extend that coverage for client environments

Automate SOC workflows end to end: alert enrichment, escalation paths, and response actions mapped to our SLA tiers

Support SOC analysts on the technical side of incident response and DFIR: log, disk and memory forensics, malware triage, and root cause investigation during escalations

• Document what you build. Runbooks, integration guides, and playbook logic that an analyst can follow without you in the room
• What You Bring
• Required
• 3+ years in security engineering, SOC engineering, or detection engineering
• Strong Python for security tooling, automation, and data pipelines
• Hands-on SIEM experience: content development, log parsing, normalization, and correlation rule design (any major platform)
• Experience building or operating SOAR playbooks and automated response workflows
• Working DFIR knowledge: incident response process, forensic artifact analysis, timeline reconstruction, malware triage
• API integration experience: REST, webhooks, and queue-based pipelines
• Applied ML on security data: anomaly detection, classification, or model evaluation in a detection context
• Working fluency with MITRE ATT&CK and NIST incident response frameworks
• Able to join an on-call rotation for critical incident support
• Preferred
• Certifications such as GCIH, GCFA, GCIA, GCED, or OSCP
• Experience with Elasticsearch/OpenSearch, Kafka, or similar log pipeline components
• Container and cloud platform experience (Docker, Kubernetes, AWS/GCP/Azure) for deploying detection infrastructure
• Prior work in an MSSP or managed SOC environment
• Contributions to open-source security tooling
• Why This Role

You will not be configuring someone else's product. You will be building ours, and watching it run against live threats the same week. Your detection logic protects banks, government institutions, and enterprises across the region. Your automation shortens response times that are measured against contractual SLAs, not vibes.

You also get opportunity to collaborate with Zentara Labs. Research projects, AI/ML development under an ISO 42001 certified management system, and a pipeline of products (SOAR among them) where early engineers shape the architecture.

• What We Offer
• Competitive salary, adjusted to experience and certifications
• Certification sponsorship and dedicated training budget
• Health insurance
• Modern office at BAIC Tower, Gading Serpong, with the SOC and engineering teams on the same floor
• A 40+ person team where your work is visible to leadership, not buried under layers
• Zentara Technologies. Built by Minds Not from This World.