Cyber Security Engineer
PT Bumi Amartha Teknologi Mandiri
- Central Jakarta, Indonesia9, RT10/RW01, Jalan Jenderal Sudirman, Karet Kel., Setia Budi, Central Jakarta, DKI Jakarta, IndonesiaCentral JakartaDKI JakartaIndonesiaIndonesia
- ContractualCONTRACTOR
Posted 4 days ago and deadline of application is on 11 Sep
Recruiter was hiring 44 minutes ago
2025-07-14T07:07:26.659502+00:002025-09-11T17:00:00+00:00Job Description
- Design, deploy, and fine-tune SIEM solutions such as IBM QRadar, Splunk, Wazuh, ArcSight, and Elastic SIEM.
- Manage log ingestion pipelines, develop correlation rules, and continuously optimize alerting mechanisms.
- Lead and coordinate incident response activities based on industry frameworks (MITRE ATT&CK, NIST IR, Cyber Kill Chain).
- Integrate and operationalize threat intelligence feeds to enhance detection and response capabilities.
- Conduct threat hunting to identify and mitigate advanced persistent threats.
- Develop automation workflows using Python, PowerShell, or Bash to streamline security operations.
- Operate and manage SOAR platforms such as Cortex XSOAR, Splunk Phantom, or IBM Resilient.
- Perform digital forensics, memory analysis, and root cause investigation of complex security incidents.
- Collaborate with IT and SOC teams to implement effective mitigation strategies and security improvements.
- Create and maintain comprehensive technical documentation, playbooks, and reports.
- Mentor and provide guidance to Tier 1 and Tier 2 SOC Analysts.
- Stay current with emerging security trends, threats, and technologies through continuous learning.
Minimum Qualifications
-
Bachelor's degree of Computer Science or related field
-
+4 years of experience in SOC with a focus on SIEM Engineering and Incident Response.
-
Expertise in SIEM solutions (IBM QRadar, Splunk, Wazuh, ArcSight, Elastic SIEM, etc.).
-
Experience in log ingestion management, correlation rule development, and SIEM fine-tuning.
-
Strong knowledge of threat intelligence integration and threat hunting.
-
Proficiency in Python, PowerShell, or Bash for automation & scripting.
-
Familiarity with MITRE ATT&CK, Cyber Kill Chain, and NIST Incident Response Framework.
-
Hands-on experience with SOAR platforms (Cortex XSOAR, Splunk Phantom, IBM Resilient).
-
Experience in digital forensics and memory analysis.
-
Strong analytical and troubleshooting skills for security incidents and SIEM optimization.
-
Ability to develop effective mitigation strategies for advanced cyber threats.
-
Excellent communication and collaboration skills with SOC teams and IT staff.
-
Ability to train and mentor SOC Analysts (Tier 1 & Tier 2).
-
Strong technical documentation skills.
-
Preferred certifications: GCIA, GSOC, GCIH, Splunk Architect, IBM QRadar, CISSP, CEH.
-
Commitment to continuous learning and staying updated on cybersecurity trends.
Jobs Summary
- Job Level
- Entry Level / Junior, Apprentice
- Job Category
- IT and Software
- Educational Requirement
- Bachelor's degree graduate
- Recruiter response to application
- Sometimes
- Office Address
- Jalan Jenderal Sudirman, Karet Kel., Setiabudi
Feel secure when applying: look for the verified icon and always do your research on a company. Avoid and report situations when employers require payment or work without compensation as part of their application process.