Senior SIEM Engineer - Cloud Security & SOC Automation

Ensign InfoSecurity; Jakarta Pusat; On-site; IDR 180,000,000 - 360,000,000; Full time

Job summary

Ensign InfoSecurity seeks an experienced SIEM Engineer to architect, implement, and maintain SIEM solutions for our clients. You will configure parsers, maintain health and uptime, and develop detections for emerging threats across on-premises and cloud environments.

You will automate processes using PowerShell, Python, or Bash, and work closely with SOC analysts to investigate incidents and improve security postures.

Qualifications

• Proven experience as a SIEM Engineer or in a similar security operations role.
• Knowledge of designing and operating SIEM use cases and operational models.
• Hands-on in multiple security domains such as SIEM, EDR, vulnerability management or cloud security.

Responsibilities

• Architect, implement, and maintain SIEM solutions for customers.
• Ensure SIEM health and uptime; patching and upgrades as needed.
• Integrate data feeds from on-premises and cloud devices; configure parsers and forwarders.
• Develop detections for latest threats and automate responses using scripting.
• Support SOC analysts and provide security consultancy to internal teams.

Skills

Cyber security

SIEM engineering

Security monitoring

Scripting: PowerShell/Python

Cloud security

Tools

Splunk

PAM/EDR/IDS-IPS/WAF

Job description

Ensign InfoSecurity seeks an experienced SIEM Engineer to architect, implement, and maintain SIEM solutions for our clients. You will configure parsers, maintain health and uptime, and develop detections for emerging threats across on-premises and cloud environments.

You will automate processes using PowerShell, Python, or Bash, and work closely with SOC analysts to investigate incidents and improve security postures.