Onsite Security Engineer — NDR & Incident Response

Securxcess; Kota Medan ᯔᯩᯑᯉ᯲; On-site; IDR 150,000,000 - 210,000,000; Full time

Job summary

A cybersecurity company in Medan is seeking an onsite Security Engineer to monitor network threats and respond to incidents. The role requires a Bachelor's degree in IT, at least 1 year of experience, and proficiency in network analysis tools. Candidates should also understand various protocols and possess scripting skills. This position involves deep packet inspection and collaboration with SOC teams for incident management.

Qualifications

• Minimum 1 year of experience as a Security Engineer or related role.
• Understanding of NDR and SIEM operations.

Responsibilities

• Monitor and analyze dashboards and alerts from the NDR platform.
• Investigate network anomalies and security alerts.
• Conduct deep packet inspection for attack behaviors.
• Act as primary responder for network incidents.
• Support containment and remediation of incidents.
• Provide critical network forensics data.
• Adjust NDR detection rules for accuracy.
• Develop custom detection rules for emerging threats.

Skills

Network analysis tools (Wireshark, tcpdump)

TCP/IP protocols

Linux command-line operations

Scripting (Python, Bash)

MITRE ATT&CK framework

NDR and SIEM operations

Education

Bachelor’s degree in Information Technology or related field

Tools

Open-source tools (Zeek, Suricata)

Commercial NDR platforms (Vectra, Darktrace, ExtraHop)

Job description

A cybersecurity company in Medan is seeking an onsite Security Engineer to monitor network threats and respond to incidents. The role requires a Bachelor's degree in IT, at least 1 year of experience, and proficiency in network analysis tools. Candidates should also understand various protocols and possess scripting skills. This position involves deep packet inspection and collaboration with SOC teams for incident management.