Security Engineer – Detection & Response (SOC)

Yourpay; Jakarta Pusat; On-site; IDR 250,000,000 - 420,000,000; Full time

Job summary

YOUR! in Indonesia is building a security operations function focused on Detection & Response.

We seek a Security Engineer to establish the SOC foundation, onboard telemetry, and implement SIEM with emphasis on detection across cloud, applications, and infrastructure. The role includes developing detection use cases, tuning rules to reduce false positives, incident response playbooks, threat hunting, and collaborating with Infra and Engineering to strengthen security visibility in a fast-growing

Qualifications

• Hands-on experience in Security Operations, Detection Engineering, Incident Response, or Security Engineering.
• Experience implementing or building SIEM/security monitoring capabilities from the ground up.
• Strong understanding of log aggregation, parsing, normalization, correlation, and detection engineering.
• Experience developing and tuning SIEM detection rules and security use cases.
• Strong understanding of MITRE ATT&CK and translating attack techniques into detection logic.
• Experience investigating security events across cloud, network, application, endpoint, and identity environments.

Responsibilities

• Design and implement the SIEM and centralized security monitoring platform from the ground up.
• Identify, onboard, normalize, and maintain security telemetry from Cloudflare/WAF, API Gateway, applications, cloud, infrastructure, IAM, endpoints, and other critical systems.
• Define logging and telemetry requirements to ensure visibility across critical systems.
• Develop SIEM correlation rules, detection use cases, and alerting logic based on real-world scenarios.
• Continuously tune logs, detection rules, and alerts to improve accuracy.
• Develop security dashboards and metrics covering telemetry coverage and MTTR, alert quality.
• Investigate security alerts; conduct threat analysis, incident investigation, and root cause analysis.
• Develop and maintain incident response playbooks and response procedures.
• Perform threat hunting to identify suspicious activities beyond existing detections.
• Work with Infrastructure and Engineering on containment and remediation.
• Identify security visibility gaps and improve detection coverage across the environment.

Skills

Security Operations

Detection Engineering

Incident Response

Security Engineering

SIEM knowledge

Threat hunting

Cloud security

Log aggregation

MITRE ATT&CK

Python scripting

Tools

Splunk

Elastic

Wazuh

AlienVault

Security Onion

EDR/XDR

Job description

YOUR! in Indonesia is building a security operations function focused on Detection & Response.

We seek a Security Engineer to establish the SOC foundation, onboard telemetry, and implement SIEM with emphasis on detection across cloud, applications, and infrastructure. The role includes developing detection use cases, tuning rules to reduce false positives, incident response playbooks, threat hunting, and collaborating with Infra and Engineering to strengthen security visibility in a fast-growing