Defensive Security Operations Lead

Bank Saqu; Jakarta Pusat; On-site; IDR 500,000,000 - 800,000,000; Full time

Job summary

Bank Saqu in Jakarta seeks a Senior Defensive Operations Manager to lead the SOC team, including analysts, responders, hunters, and security engineers, guiding 24/7 monitoring across networks, endpoints, cloud, and critical infrastructure.

You will develop detection use cases in SIEM, EDR, IDS/IPS, WAF, DLP, and oversee incident response from detection to containment, plus proactive threat hunting and threat intelligence integration.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or a related field.
• Minimum 7 years of experience in cybersecurity, including at least 3 years in a managerial role within a SOC or defensive operations environment.
• Strong knowledge of security technologies, including SIEM, SOAR, EDR, IDS/IPS, NDR, firewalls, and DLP.
• In-depth understanding of the incident response lifecycle and threat hunting methodologies.
• Familiarity with MITRE ATT&CK, Cyber Kill Chain, and NIST Incident Response frameworks.
• Relevant certifications such as CISSP, GCIA, GCIH, GMON, CCISO, or equivalent are highly preferred.
• Strong analytical capabilities and effective communication skills for incident escalation and stakeholder engagement.
• Knowledge of security regulations issued by OJK, BI, and ISO/PCI standards.

Responsibilities

• Lead the Defensive Operations team, including SOC Analysts, Incident Responders, Threat Hunters, and Security Engineers.
• Manage 24/7 security monitoring across networks, endpoints, applications, cloud environments, and critical infrastructure.
• Develop and optimize detection use cases within SIEM, EDR, IDS/IPS, WAF, DLP, and other security solutions.
• Oversee incident response activities from detection and analysis through containment, eradication, and recovery.
• Conduct proactive threat hunting to identify suspicious activities before they develop into security incidents.
• Manage the integration of threat intelligence into detection and response processes.
• Design, develop, and implement security architectures and engineering solutions to support defensive operations.
• Manage log source integration, use case development, and automation through SOAR to improve SOC efficiency.
• Prepare incident reports, threat trend analyses, and defensive control effectiveness reports for management and regulatory authorities.
• Develop playbooks, SOPs, and automation initiatives to accelerate and standardize SOC and incident response processes.
• Build and enhance team capabilities through technical training programs and tabletop exercises.

Skills

SOC management

Incident response

Threat hunting

Security analytics

Communication

Regulatory awareness

Education

Bachelor's degree in Computer Science or Information Systems

Tools

SIEM

SOAR

EDR

IDS/IPS

NDR

Firewalls

DLP

Job description

Bank Saqu in Jakarta seeks a Senior Defensive Operations Manager to lead the SOC team, including analysts, responders, hunters, and security engineers, guiding 24/7 monitoring across networks, endpoints, cloud, and critical infrastructure.

You will develop detection use cases in SIEM, EDR, IDS/IPS, WAF, DLP, and oversee incident response from detection to containment, plus proactive threat hunting and threat intelligence integration.