Security Operations Lead - Jakarta

PT Bibit Tumbuh Bersama; Jakarta Pusat; In loco; IDR 600.000.000 - 900.000.000; Tempo pieno

Descrizione del lavoro

PT Bibit Tumbuh Bersama is seeking a Security Operations Lead to own and advance our security operations function. You will drive proactive threat detection, vulnerability management, and incident response while building a high-performing security team.

Collaborate with Engineering and Infrastructure to strengthen our security posture and resilience against evolving cyber threats. You will lead a team, mentor staff, and continuously improve security capabilities, processes, and reporting.

Competenze

• 5+ years in cybersecurity with hands-on security operations.
• Proven experience leading security operations activities and coordinating remediation.
• Knowledge of vulnerability assessment, risk-based prioritization, remediation tracking, and validation.
• Strong understanding of SIEM, EDR/XDR, monitoring, detection engineering, and incident response methodologies.
• Experience in threat intelligence and MITRE ATT&CK concepts.

Mansioni

• Lead the security operations team, set priorities, and drive performance.
• Own vulnerability management lifecycle from assessment to remediation validation.
• Oversee security monitoring, threat detection, and incident response activities.
• Develop and implement incident response playbooks, escalation paths, and communications.
• Establish security processes, automation, and reporting with clear KPIs.

Conoscenze

Security leadership

Threat detection

Vulnerability management

Incident response

Threat hunting

Automation

Stakeholder management

Strumenti

SIEM

EDR/XDR

SOAR platforms

Descrizione del lavoro

We're looking for a Security Operations Lead to strengthen and lead our security operations capabilities at Stockbit & Bibit.

In this role, you'll take ownership of our security operations function, driving proactive threat detection, vulnerability management, and incident response while building and developing a high-performing security team.

You'll work closely with Engineering, Infrastructure, and other stakeholders to strengthen our security posture, improve operational resilience, and ensure our systems remain protected against evolving cyber threats.

If you're passionate about cybersecurity, enjoy solving complex security challenges, and have the leadership mindset to build and scale security operations, we'd love to hear from you!

What You'll Do

1. Security Operations Leadership & Team Development

• Lead, mentor, and develop the security operations team, establishing clear priorities, responsibilities, and performance expectations.

• Drive continuous improvement of security operations capabilities, processes, and overall team effectiveness.

• Provide technical guidance, coaching, and resource prioritization to ensure effective execution of security initiatives.

2. Vulnerability Management

• Own the end-to-end vulnerability management lifecycle, from assessment and risk-based prioritization to remediation tracking and validation.

• Collaborate with Engineering, Infrastructure, and application owners to ensure vulnerabilities are addressed based on severity, exploitability, and business impact.

• Monitor vulnerability exposure and remediation progress, escalating critical risks and overdue remediation when necessary.

3. Security Monitoring & Threat Detection

• Oversee security monitoring and detection capabilities across endpoints, networks, identities, applications, infrastructure, and cloud environments.

• Enhance threat detection through SIEM and EDR/XDR optimization, threat hunting, threat intelligence, and detection engineering.

• Identify security visibility gaps and continuously improve monitoring coverage, alert quality, and investigation capabilities.

4. Incident Response

• Lead the response to significant security incidents, covering investigation, containment, remediation, recovery, and root cause analysis.

• Establish and maintain incident response procedures, playbooks, escalation paths, and communication protocols.

• Conduct post-incident reviews and ensure corrective actions are implemented to prevent recurrence.

5. Security Processes, Automation & Reporting

• Establish and optimize security operations procedures, automation, and workflows to improve efficiency and consistency.

• Define and monitor key performance indicators (KPIs) to measure security operations effectiveness, incident response performance, and vulnerability remediation progress.

• Provide management with clear reporting on security incidents, vulnerability exposure, operational performance, and improvement priorities.

What We're Looking For

• 5+ years of experience in cybersecurity, with substantial hands-on experience in security operations, vulnerability management, incident response, or threat detection.

• Proven experience leading security operations activities, managing security risks, and coordinating cross-functional remediation efforts.

• Practical knowledge of vulnerability assessment, risk-based prioritization, remediation tracking, and validation.

• Strong technical understanding of SIEM, EDR/XDR, security monitoring, detection engineering, and incident response methodologies.

• Solid understanding of threat intelligence, MITRE ATT&CK, common attack techniques, and security investigation practices.

• Experience improving security operations through process optimization, automation, threat hunting, or detection tuning.

• Strong leadership, analytical, communication, and stakeholder management skills, with the ability to prioritize risks and make decisions under pressure.

Nice to Have

• Experience leading a security operations team within technology, fintech, financial services, or other mission-critical environments.

• Experience with security monitoring and vulnerability management in GCP or AWS environments.

• Familiarity with SOAR platforms, security automation, and incident response orchestration.

• Experience in digital forensics, malware analysis, or advanced threat hunting.

• Relevant certifications such as CISSP, GCIH, GCIA, GCFA, or equivalent practical experience.