Security Observability Engineer [SOC] - ID (Ref: 25-040)

Dropsuite Limited; Kota Bandung; On-site; IDR 200.000.000 - 300.000.000; Full time

Job summary

A cybersecurity firm located in Bandung, Indonesia, is seeking a Security Observability Engineer to join their team. The role involves monitoring and protecting systems against security threats, performing triage, and collaborating with various departments. Candidates should have a degree in Computer Science or Cybersecurity and 2+ years of experience in security operations. The position is full-time and onsite with competitive compensation and benefits.

Benefits

Competitive compensation

Health insurance for dependents

Hybrid work model

12 Days of Annual Leave

Free lunches in office

Qualifications

• Minimum 2 years of experience in IT support, SOC, or related security operations environment.
• Familiarity with SIEM platforms and security monitoring tools.
• Basic understanding of networking concepts and cloud infrastructure.

Responsibilities

• Monitor security alerts, events, and logs for potential security threats.
• Perform first-level triage of security alerts and classify incidents based on severity.
• Investigate suspicious activities and escalate incidents to relevant departments.

Skills

Problem-solving skills

Analytical skills

Investigative skills

Knowledge of scripting/automation

Education

Diploma or Degree in Computer Science, Cybersecurity, or related field

Tools

SIEM platforms

EDR tools

IDS/IPS

Job description

Nice to Meet You! We areDropsuite, A NinjaOne Company!

We are seeking a Security Observability Engineer to join our Security team to monitor and protect our systems and applications. In this role, you will be responsible for safeguarding Dropsuite’s cloud and private infrastructure by actively monitoring security events, detecting potential threats, and performing surveillance of our computer systems, applications, networks, and security controls.

This role involves continuously monitoring security alerts, identifying and analysing suspicious activities, and responding in the capacity of a Level 1 SOC engineer. You will be responsible for the timely triage and escalation of security incidents, threats, and vulnerabilities to ensure rapid containment and resolution.

Work Arrangement

• Full-time position

• Onsite work model (5 days per week in the office)

• Monday to Friday, 5-day work week

• Eligible to reside and work in Bandung (Indonesian citizenship only)

This position is open exclusively to candidates who reside in and are authorised to work in Indonesia. Only shortlisted candidates will be contacted.

Key Accountabilities

• Monitor security alerts, events, and logs from multiple sources (SIEM, IDS/IPS, EDR, cloud security tools, firewalls, etc.) for potential security threats or anomalous activity.

• Perform first-level triage of security alerts, classify incidents based on severity and criticality, and escalate to engineers of relevant departments as needed.

• Investigate suspicious activities, malware detections, phishing attempts, data loss alerts, or account compromise indicators.

• Execute standard operating procedures (SOPs) for incident response, containment, and remediation at the L1 level.

• Create, update, and track incident tickets to closure, ensuring timely communication with stakeholders and compliance with defined SLAs.

• Collaborate with IT, engineering, and security teams to validate
  alerts, mitigate risks, and enforce security controls.

• Conduct daily health checks of security monitoring systems and tools to ensure data is collected and processed accurately.

• Assist with vulnerability triage by reviewing scan results and escalating to appropriate teams for remediation.

• Generate and deliver reports on security incidents, trends, and SOC metrics for management review.

• Stay current with emerging cybersecurity threats, tactics, techniques, and procedures (TTPs) through ongoing research and training.

• Contribute to improving SOC workflows, runbooks, and detection use cases for greater operational efficiency.

• Support awareness efforts by documenting and sharing lessons learned from incidents.

Qualifications and Competencies

• Diploma or Degree in Computer Science, Cybersecurity, or a related field.

• Minimum 2 years of experience in IT support, SOC, or related security operations environment.

• Familiarity with SIEM platforms (e.g., Splunk, Sentinel, Chronicle, etc) and security monitoring tools (e.g., EDR, IDS/IPS, DLP, CASB, CNAPP, CSPM, etc)).

• Basic understanding of networking concepts, firewalls, cloud infrastructure (AWS/GCP), and endpoint security.

• Strong problem-solving, analytical, and investigative skills.

• Ability to differentiate between false positives and true security incidents.

• Knowledge of common attack vectors, MITRE ATT&CK framework, and incident response best practices.

• Strong sense of accountability and urgency in responding to security threats.

• Ability to work on rotational shifts and flexible hours, including nights and weekends.

• Clear communicator, confident, self-sufficient, and disciplined in following processes.

• Knowledge of scripting or automation (Python, PowerShell, etc.) is a plus.

• Security certifications such as CompTIA Security+, CySA+, CC, or equivalent are advantageous.

• Open and candid in discussing security incidents, potential improvements, and solutions.

• A passion for cybersecurity, continuous learning, and adopting SOC/SIEM best practices.

Why Join UsAt Dropsuite, now proudly part of NinjaOne, we are on a mission to safeguard business information and help businesses stay in business. We are a global, fast-growing, partner-centric company building secure, scalable, and highly usable cloud backup technologies for businesses of all sizes. Today, we perform billions of backups daily for organizations across more than 100 countries.

As we enter an exciting new chapter with NinjaOne—a leader in endpoint management, security, and IT automation—our combined strengths enable us to drive even greater impact, innovation, and global scale. Together, we are building a world-class platform that empowers IT teams with simplicity, performance, and reliability.

At our core, we are a team of hungry owners: we are tenacious in our pursuit of excellence and take full ownership in everything we do. We are deeply customer-focused, collaborative, and solutions-driven. We play as a team—respecting, supporting, and elevating one another every step of the way.

Join us as we shape the future of IT and data protection—powered by passion, purpose, and the spirit of ownership.

Rewards That Go Beyond

• Competitive compensation

• Health insurance for you and your dependents

• Social Security (BPJS Ketenagakerjaan)

• Hybrid work model

• 12 Days of Annual Leave

• Entitled to Indonesia Public Holidays

• Other leave benefits, such as Wedding leave

• Free lunches in office

• Growth opportunities

• Work in a global company with meaningful work, highly skilled colleagues and an amazing culture

Diversity and Inclusion StatementDropsuite is an Equal Employment Opportunity and Affirmative Action Employer. Qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status.

As part of our recruitment process, we may collect personal data to support hiring-related activities such as screening, assessment, and communication. This information is collected solely for recruitment purposes and handled in accordance with applicable data protection and privacy regulations. Your data will be treated with strict confidentiality and used only to facilitate your application with us.

Your Career Growth Starts Here. Apply Now!