Security Operations Lead - Incident Response Expert

PT Nityo Infotech; Jakarta Utara; On-site; IDR 500,000,000 - 900,000,000; Full time

Job summary

PT Nityo Infotech in Jakarta is seeking a Security Operations Lead to drive security monitoring, incident response, and risk reporting for client accounts. You will define detection coverage, manage on-call rotation, and coordinate with IAM and Compliance teams.

The role requires coordinating incident containment, leading vulnerability remediation, and communicating security posture to clients, with extensive experience in SOC processes and SIEM platforms.

Qualifications

• Minimum 7 years of experience in security operations leadership and incident command.
• Strong knowledge of SOC processes, threat hunting, security architecture reviews, and incident response.
• Experience in vulnerability management, security risk assessment, and security posture reporting.
• Familiarity with SIEM platforms such as Splunk, IBM QRadar, or Microsoft Sentinel.
• Knowledge of SOAR, EDR, and the MITRE ATT&CK framework.
• Proven leadership and stakeholder management skills, with the ability to communicate security risks effectively to clients.
• CISSP, GCIH, or CEH certification is preferred but not mandatory.

Responsibilities

• Lead security monitoring strategy, including detection coverage, use case development, and tuning based on the threat model.
• Command security incidents, direct containment and eradication activities, and manage client communications.
• Oversee the vulnerability management lifecycle and ensure timely remediation of identified vulnerabilities.
• Lead and prioritize the activities of Security Operations, Identity and Access Management (IAM), and Compliance analysts.
• Report security posture, incident trends, and residual risks to clients.
• Collaborate with the Governance and Compliance Manager to maintain a consistent security and compliance posture.
• Participate in the on-call rotation as the senior escalation point for security incidents.

Skills

Security leadership

Incident command

Threat detection

Vulnerability management

SIEM experience

Stakeholder management

Client communication

Tools

Splunk

IBM QRadar

Microsoft Sentinel

SOAR

EDR

Job description

PT Nityo Infotech in Jakarta is seeking a Security Operations Lead to drive security monitoring, incident response, and risk reporting for client accounts. You will define detection coverage, manage on-call rotation, and coordinate with IAM and Compliance teams.

The role requires coordinating incident containment, leading vulnerability remediation, and communicating security posture to clients, with extensive experience in SOC processes and SIEM platforms.