SecOps Team Lead: SIEM, EDR & Cloud Security

PT Petrolink Services Indonesia; Jakarta Selatan; Sur place; IDR 500 000 000 - 900 000 000; Plein temps

Résumé du poste

Petrolink Services Indonesia seeks an ICT Information Security Team Lead to direct day-to-day security operations protecting our infrastructure, endpoints, cloud workloads, applications and data. You will own the operational security program, including detection and response, vulnerability management, monitoring, threat hunting, and continuous improvement aligned with ISO/IEC 27001 standards.

You will lead a team, define runbooks, drive audit readiness and partner with leadership to report

Qualifications

• Bachelor’s degree in information security, Computer Science, IT, Engineering, or related field.
• 8 - 12+ years in IT/Security, including 3 - 5+ years in SecOps leadership or senior SecOps engineering.
• Experience supporting ISO/IEC 27001 audits through operational evidence and corrective action management.
• Core SecOps Technical Skills (SIEM/SOAR, EDR/XDR, Cloud security operations (Azure/AWS), TCP/IP, DNS, AD/Entra, Linux/Windows, virtualization).
• ISO/IEC 27001 & Process Skills.
• Certified CISSP or CISM.

Responsabilités

• Own and continuously improve SIEM/SOAR capability, use-case coverage, alert fidelity, and tuning to reduce noise and increase detection accuracy.
• Define and maintain monitoring standards: log onboarding, parsing, retention, correlation rules, and alert triage workflows.
• Establish operational metrics (MTTD, MTTR, false positive rate, detection coverage) and report trends to leadership.
• Own the Incident Response lifecycle: preparation, detection, analysis, containment, eradication, recovery, and post-incident reviews.
• Own the end-to-end vulnerability management program: scanning strategy, prioritization, remediation SLAs, exceptions, and validation.
• Ensure strong operational controls for endpoint security (EDR), identity security (MFA, PAM, access reviews), and cloud security (workload protection, posture management).
• Own the SecOps tooling roadmap (SIEM, EDR/XDR, vulnerability scanners, email security, CASB/SSPM/CSPM where relevant).
• Automate repetitive SecOps tasks using scripting and SOAR playbooks (enrichment, triage, containment actions, ticketing integration).
• Ensure SecOps processes and evidence meet ISO 27001 expectations (e.g., incident management, logging/monitoring, access control, vulnerability management, supplier-related operational risks where applicable).
• Lead and mentor SecOps lead/analysts/engineers; define skill development plans and build on-call and escalation coverage.
• Maintain an ISO/IEC 27001-aligned, version-controlled security documentation and evidence repository (policies, standards, procedures, runbooks, records), ensuring timely reviews/approvals and audit-ready artifacts that accurately reflect operational practices and support internal/external audits.
• All other duties as assigned.

Connaissances

SIEM/SOAR

EDR/XDR

Cloud security operations

TCP/IP/DNS/ADEntra

Linux/Windows

ISO/IEC 27001

Incident response

Threat hunting

PowerShell/Python

Formation

Bachelor's degree in information security/CS/IT/Engineering

Outils

ServiceNow/Jira

Description du poste

Petrolink Services Indonesia seeks an ICT Information Security Team Lead to direct day-to-day security operations protecting our infrastructure, endpoints, cloud workloads, applications and data. You will own the operational security program, including detection and response, vulnerability management, monitoring, threat hunting, and continuous improvement aligned with ISO/IEC 27001 standards.

You will lead a team, define runbooks, drive audit readiness and partner with leadership to report