Security Observability Engineer [SOC]

Dropsuite; Kota Bandung; On-site; IDR 150.000.000 - 200.000.000; Full time

Job summary

A global cybersecurity firm in Indonesia is seeking a Security Observability Engineer to enhance security across cloud and private infrastructure. The role entails monitoring security events, investigating threats, and collaborating with teams to strengthen security controls. The ideal candidate possesses a relevant degree, has 2+ years of experience, and is skilled in handling security monitoring tools. The position offers competitive compensation and opportunities for career growth.

Benefits

Competitive compensation

Health insurance

Social Security benefits

Hybrid work model

12 Days of Annual Leave

Free lunches in office

Growth opportunities

Qualifications

• Minimum 2 years of experience in IT support or SOC.
• Familiarity with security monitoring tools.
• Ability to differentiate between false positives and true security incidents.

Responsibilities

• Monitor security alerts and logs for potential threats.
• Perform first-level triage of security alerts.
• Investigate suspicious activities.
• Execute incident response procedures.

Skills

SIEM familiarity

Problem-solving

Analytical skills

Investigative skills

Networking concepts understanding

Knowledge of attack vectors

Scripting or automation skills

Education

Diploma or Degree in Computer Science, Cybersecurity

Tools

Splunk

EDR tools

IDS/IPS

Job description

Nice to Meet You! We are Dropsuite, a NinjaOne Company!

We are seeking a Security Observability Engineer to join our Security team to monitor and protect our systems and applications. In this role, you will be responsible for safeguarding Dropsuite’s cloud and private infrastructure by actively monitoring security events, detecting potential threats, and performing surveillance of our computer systems, applications, networks, and security controls.

This role involves continuously monitoring security alerts, identifying and analysing suspicious activities, and responding in the capacity of a Level 1 SOC engineer. You will be responsible for the timely triage and escalation of security incidents, threats, and vulnerabilities to ensure rapid containment and resolution.

Work Arrangement

• Full-time position
• Onsite work model (5 days per week in the office)
• Monday to Friday, 5-day work week
• Eligible to reside and work in Bandung (Indonesian citizenship only)

This position is open exclusively to candidates who reside in and are authorised to work in Indonesia. Only shortlisted candidates will be contacted.

Key Accountabilities

• Monitor security alerts, events, and logs from multiple sources (SIEM, IDS/IPS, EDR, cloud security tools, firewalls, etc.) for potential security threats or anomalous activity.
• Perform first-level triage of security alerts, classify incidents based on severity and criticality, and escalate to engineers of relevant departments as needed.
• Investigate suspicious activities, malware detections, phishing attempts, data loss alerts, or account compromise indicators.
• Execute standard operating procedures (SOPs) for incident response, containment, and remediation at the L1 level.
• Create, update, and track incident tickets to closure, ensuring timely communication with stakeholders and compliance with defined SLAs.
• Collaborate with IT, engineering, and security teams to validate alerts, mitigate risks, and enforce security controls.
• Conduct daily health checks of security monitoring systems and tools to ensure data is collected and processed accurately.
• Assist with vulnerability triage by reviewing scan results and escalating to appropriate teams for remediation.
• Generate and deliver reports on security incidents, trends, and SOC metrics for management review.
• Stay current with emerging cybersecurity threats, tactics, techniques, and procedures (TTPs) through ongoing research and training.
• Contribute to improving SOC workflows, runbooks, and detection use cases for greater operational efficiency.
• Support awareness efforts by documenting and sharing lessons learned from incidents.

Qualifications and Competencies

• Diploma or Degree in Computer Science, Cybersecurity, or a related field.
• Minimum 2 years of experience in IT support, SOC, or related security operations environment.
• Familiarity with SIEM platforms (e.g., Splunk, Sentinel, Chronicle, etc) and security monitoring tools (e.g., EDR, IDS/IPS, DLP, CASB, CNAPP, CSPM, etc).
• Basic understanding of networking concepts, firewalls, cloud infrastructure (AWS/GCP), and endpoint security.
• Strong problem-solving, analytical, and investigative skills.
• Ability to differentiate between false positives and true security incidents.
• Knowledge of common attack vectors, MITRE ATT&CK framework, and incident response best practices.
• Strong sense of accountability and urgency in responding to security threats.
• Ability to work on rotational shifts and flexible hours, including nights and weekends.
• Clear communicator, confident, self-sufficient, and disciplined in following processes.
• Knowledge of scripting or automation (Python, PowerShell, etc.) is a plus.
• Security certifications such as CompTIA Security+, CySA+, CC, or equivalent are advantageous.
• Open and candid in discussing security incidents, potential improvements, and solutions.
• A passion for cybersecurity, continuous learning, and adopting SOC/SIEM best practices.

Why Join Us

At Dropsuite, now proudly part of NinjaOne, we are on a mission to safeguard business information and help businesses stay in business. We are a global, fast-growing, partner-centric company building secure, scalable, and highly usable cloud backup technologies for businesses of all sizes. Today, we perform billions of backups daily for organizations across more than 100 countries.

As we enter an exciting new chapter with NinjaOne—a leader in endpoint management, security, and IT automation—our combined strengths enable us to drive even greater impact, innovation, and global scale. Together, we are building a world-class platform that empowers IT teams with simplicity, performance, and reliability.

At our core, we are a team of hungry owners: we are tenacious in our pursuit of excellence and take full ownership in everything we do. We are deeply customer-focused, collaborative, and solutions-driven. We play as a team—respecting, supporting, and elevating one another every step of the way.

Join us as we shape the future of IT and data protection—powered by passion, purpose, and the spirit of ownership.

Rewards That Go Beyond

• Competitive compensation
• Health insurance for you and your dependents
• Social Security (BPJS Ketenagakerjaan)
• Hybrid work model
• 12 Days of Annual Leave
• Entitled to Indonesia Public Holidays
• Other leave benefits, such as Wedding leave
• Free lunches in office
• Growth opportunities
• Work in a global company with meaningful work, highly skilled colleagues and an amazing culture

Diversity and Inclusion Statement

Dropsuite is an Equal Employment Opportunity and Affirmative Action Employer. Qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status.

As part of our recruitment process, we may collect personal data to support hiring-related activities such as screening, assessment, and communication. This information is collected solely for recruitment purposes and handled in accordance with applicable data protection and privacy regulations. Your data will be treated with strict confidentiality and used only to facilitate your application with us.

Your Career Growth Starts Here. Apply Now!