Defensive Security Operations Leader

bank saqu; Indonesia; On-site; IDR 2,500,000,000 - 4,500,000,000; Full time

Job summary

bank saqu is seeking an experienced Senior Cybersecurity Leader to head Defensive Operations. You will oversee SOC analysts, incident responders, hunters, and security engineers, ensuring continuous monitoring of networks, endpoints, and cloud environments.

Your role includes developing detection use cases and driving incident response across the organization. You will guide threat hunting, integrate threat intelligence into processes, and design secure architectures to support defensive

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or a related field.
• Minimum 7 years in cybersecurity, with at least 3 years in a managerial SOC/defensive ops role.
• Strong knowledge of SIEM, SOAR, EDR, IDS/IPS, NDR, firewalls, and DLP.
• Well-versed in incident response lifecycle and threat hunting.
• Familiar with MITRE ATT&CK, Cyber Kill Chain, and NIST IR.
• Relevant certifications (CISSP, GCIA, GCIH, GMON, CCISO) preferred.

Responsibilities

• Lead the Defensive Operations team, including SOC Analysts, Incident Responders, Threat Hunters, and Security Engineers.
• Manage 24/7 security monitoring across networks, endpoints, applications, cloud environments, and critical infrastructure.
• Develop and optimize detection use cases within SIEM, EDR, IDS/IPS, WAF, DLP, and other security solutions.
• Oversee incident response activities from detection and analysis through containment, eradication, and recovery.
• Conduct proactive threat hunting to identify suspicious activities before incidents develop.
• Manage integration of threat intelligence into detection and response processes.
• Design, develop, and implement security architectures across network, endpoint, cloud, IAM, PAM, encryption, and related technologies.
• Manage log source integration, use case development, and automation through SOAR.
• Prepare incident reports, threat trend analyses, and defensive control reports for management and regulators.
• Develop playbooks, SOPs, and automation to accelerate SOC and incident response processes.
• Build and enhance team capabilities through training and tabletop exercises.

Skills

Cybersecurity

SOC management

Threat hunting

Incident response

Security engineering

Education

Bachelor's degree in Computer Science / Information Systems

Tools

SIEM

SOAR

EDR

IDS/IPS

NDR

Firewalls

DLP

Job description

bank saqu is seeking an experienced Senior Cybersecurity Leader to head Defensive Operations. You will oversee SOC analysts, incident responders, hunters, and security engineers, ensuring continuous monitoring of networks, endpoints, and cloud environments.

Your role includes developing detection use cases and driving incident response across the organization. You will guide threat hunting, integrate threat intelligence into processes, and design secure architectures to support defensive