Cyber Defense Engineer - SIEM, Threat Detection & Response

PT Bumi Amartha Teknologi Mandiri; Jakarta Pusat; In loco; IDR 279.000.000 - 502.200.000; Tempo pieno

Descrizione del lavoro

PT Bumi Amartha Teknologi Mandiri (AMARTEK) seeks a Detection Engineer to join our on-site team in Jakarta. The role focuses on detecting threats using Elastic SIEM, improving detection rules, and coordinating incident response with SOC teams.

The candidate will review logs, implement mitigations, and drive security projects including IAM, MFA, and cloud security configurations. A strong background in SIEM operations and security architecture is required.

Competenze

• Bachelor's degree in Computer Science, Information Technology, Information Systems, or related discipline.
• Minimum 3-6 years of experience in cybersecurity, preferably in SOC or SIEM operations.
• Hands-on experience with Elastic SIEM / ELK Stack or equivalent SIEM platforms.
• Strong analytical skills in understanding network, application, and system-level threats and logs.
• Solid understanding of system/solution architecture and ability to recommend secure design alternatives.
• Detail-oriented with strong problem-solving abilities and root cause analysis skills.
• Excellent communication skills; able to collaborate across technical and nontechnical teams.
• Self-driven, quick learner, and able to work independently with minimal supervision.
• Certifications such as CEH, CompTIA Security+, GCIH, or Elastic Certified Analyst are a plus.

Mansioni

• Utilize a combination of leading security technologies and SIEM tools to detect, classify, and respond to security threats.
• Propose mitigations and long-term solutions for identified threats, vulnerabilities, and recurring incidents.
• Review, assess and identify improvement plans for all detection rules over security platforms especially on SIEM.
• Monitor security alerts and incidents from SIEM and other tools.
• Lead response efforts for security incidents and breaches.
• Perform root cause analysis and recommend remediation steps.
• Plan, implement, and upgrade cybersecurity controls and monitoring mechanisms.
• Provide technical support during incident investigations.
• Develop correlation rules, visual dashboards, and automated alerting in Elastic/Kibana.
• Define and improve cybersecurity methodologies, processes, and tools used by analysts and engineers.

Conoscenze

Elastic SIEM

Threat detection

Incident response

Log analysis

Security engineering

Security automation

Formazione

Bachelor's degree in Computer Science/Information Technology/Information Systems

Strumenti

ELK Stack/Elastic SIEM

Descrizione del lavoro

PT Bumi Amartha Teknologi Mandiri (AMARTEK) seeks a Detection Engineer to join our on-site team in Jakarta. The role focuses on detecting threats using Elastic SIEM, improving detection rules, and coordinating incident response with SOC teams.

The candidate will review logs, implement mitigations, and drive security projects including IAM, MFA, and cloud security configurations. A strong background in SIEM operations and security architecture is required.