Cybersecurity Operations Centre - Jakarta

Job Responsibilities

Security Monitoring

Perform continuous monitoring and triage of security events and alerts generated by SIEM, EDR, NDR, IDS/IPS, firewalls, and cloud security environments.

Incident Investigation & Triage

Investigate suspected cybersecurity alerts, conduct root-cause analysis, and initiate incident response playbooks for containment, eradication, and recovery.

Threat Hunting & Intelligence

Actively hunt for hidden adversaries, analyze indicators of compromise (IOCs), and integrate real-time threat intelligence feeds into detection systems.

Detection Engineering

Create, maintain, and test security monitoring use cases, detection rules, and automated SOAR response playbooks.

Reporting & Drills

Prepare detailed incident reports, compile operational security metrics for dashboards, and actively participate in cyber simulation drills and forensics.

• Job Requirements
• Bachelor's degree in Computer Engineering, Information Security, or a related field.
• 3+ years of experience working within an enterprise Security Operations Center (SOC).

Hands-on experience configuring and analyzing SIEM logs (Splunk, QRadar, Microsoft Sentinel, etc.), EDR solutions, and firewall rule behaviors.

• Solid understanding of network protocols, operating system forensics (Windows/Linux), and the MITRE ATT&CK framework.
• Strong analytical, problem-solving, and script writing skills (Python, Bash, or PowerShell).