Security Engineer

PT ITSEC Asia Tbk; Jakarta Pusat; On-site; IDR 180,000,000 - 420,000,000; Full time

Job summary

PT ITSEC Asia Tbk in Jakarta seeks a skilled Splunk Engineer to install, configure, and maintain Splunk Enterprise environments. You will onboard diverse log sources, develop dashboards and alerts, and monitor data ingestion health to support security operations.

The role requires 2+ years in cybersecurity or infrastructure engineering, with SAS SPL expertise and Linux administration. Cloud familiarity and SOC concepts are a plus; strong communication is essential.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field.
• Minimum 2 years of experience in cybersecurity or infrastructure engineering.
• Experience administering Splunk Enterprise.
• Good understanding of SIEM concepts, log management, and security monitoring.
• Working knowledge of Splunk Search Processing Language (SPL).
• Experience with Splunk Enterprise Security (ES) is an advantage.
• Good Linux administration skills.
• Basic scripting knowledge using Python, Bash, or PowerShell.
• Good understanding of TCP/IP networking, Routing & Switching, VLAN, DNS, DHCP, VPN, and Syslog.
• Familiarity with AWS, Azure, or Google Cloud Platform is an advantage.
• Basic understanding of MITRE ATT&CK and Security Operations Center (SOC) practices.
• Strong analytical, troubleshooting, documentation, communication, and teamwork skills.

Responsibilities

• Install, configure, and maintain Splunk Enterprise environments.
• Configure Universal Forwarders, Heavy Forwarders, and data inputs.
• Develop dashboards, reports, alerts, and SPL searches.
• Monitor SIEM platform health and troubleshoot data ingestion issues.
• Onboard log sources from Windows, Linux, network devices, cloud services, enterprise applications, and security products.
• Support integration of Firewalls, IDS/IPS, EDR/XDR, Active Directory, and other enterprise security solutions.
• Administer Linux servers supporting security applications.
• Perform system upgrades, patching, maintenance, and troubleshooting.
• Support security monitoring, incident investigation, and operational troubleshooting.
• Prepare implementation documents, operational runbooks, and technical documentation.
• Support customer implementation and deployment projects.

Skills

SIEM concepts

SPL

Linux administration

Scripting

Networking basics

Threat & security monitoring

Documentation

Teamwork

Education

Bachelor's degree in Computer Science/IT/Cyber Security

Tools

Splunk Enterprise

Splunk ES

Python

Job description

• Install, configure, and maintain Splunk Enterprise environments.
• Configure Universal Forwarders, Heavy Forwarders, and data inputs.
• Develop dashboards, reports, alerts, and SPL searches.
• Monitor SIEM platform health and troubleshoot data ingestion issues.
• Onboard log sources from Windows, Linux, network devices, cloud services, enterprise applications, and security products.
• Support integration of Firewalls, IDS/IPS, EDR/XDR, Active Directory, and other enterprise security solutions.
• Administer Linux servers supporting security applications.
• Perform system upgrades, patching, maintenance, and troubleshooting.
• Support security monitoring, incident investigation, and operational troubleshooting.
• Prepare implementation documents, operational runbooks, and technical documentation.
• Support customer implementation and deployment projects.

• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field.
• Minimum2 yearsof experience in cybersecurity or infrastructure engineering.
• Experience administering Splunk Enterprise.
• Good understanding of SIEM concepts, log management, and security monitoring.
• Working knowledge of Splunk Search Processing Language (SPL).
• Experience with Splunk Enterprise Security (ES) is an advantage.
• Good Linux administration skills.
• Basic scripting knowledge using Python, Bash, or PowerShell.
• Good understanding of TCP/IP networking, Routing & Switching, VLAN, DNS, DHCP, VPN, and Syslog.
• Experience working with Firewalls, IDS/IPS, EDR/XDR, and Active Directory.
• Familiarity with AWS, Azure, or Google Cloud Platform is an advantage.
• Basic understanding of MITRE ATT&CK and Security Operations Center (SOC) practices.
• Strong analytical, troubleshooting, documentation, communication, and teamwork skills.