Senior SOC Cybersecurity Lead: Incident Response

SIGMATECH; Jakarta Pusat; On-site; IDR 500,000,000 - 800,000,000; Full time

Job summary

SIGMATECH is seeking a Senior IT SOC Cybersecurity - IT Security Operations to lead the Security Operations Center, drive threat investigation, incident response, and escalation management. The role oversees SOC Analyst L1/L2 teams, develops SOPs and playbooks, and ensures KPI/SLA achievement while coordinating with IT, compliance and risk teams to strengthen security posture.

Strong experience in SIEM/EDR/IDS-IPS, vulnerability management, and secure incident handling is preferred to advance

Qualifications

• Bachelor's degree in IT, cybersecurity, CS or related field.
• 5+ years in SOC operations, cybersecurity, incident management, and tool implementation with leadership.
• Strong knowledge of security architecture, vulnerability assessment, exploitation techniques, malware analysis and incident response.
• Experience in SOC performance metrics, SLA/KPI, SOPs, escalation procedures, and cross-functional coordination.
• Must hold at least one certification: CISSP, CISM, CEH, CHFI, CISA, or PCCNP.

Responsibilities

• Lead and oversee SOC activities including monitoring, threat investigation, incident response and escalation management.
• Manage SOC Analyst L1 and L2 teams with task allocation and performance evaluation.
• Develop and maintain security SOPs, incident response playbooks, escalation matrices, and operating procedures.
• Monitor and optimize security tools (SIEM, EDR, IDS/IPS, firewalls, threat intel) and ensure SLA/KPI achievement.
• Coordinate with IT, compliance and risk teams to manage incidents, vulnerability assessments and continuous SOC maturity.

Skills

SOC operations

Incident response

Team leadership

Security monitoring

SLA KPI management

Vulnerability assessment

Malware analysis

Security architecture

Education

Bachelor's degree in IT / Cybersecurity / CS

Tools

SIEM

EDR

IDS/IPS

Firewalls

Threat intelligence

Job description

SIGMATECH is seeking a Senior IT SOC Cybersecurity - IT Security Operations to lead the Security Operations Center, drive threat investigation, incident response, and escalation management. The role oversees SOC Analyst L1/L2 teams, develops SOPs and playbooks, and ensures KPI/SLA achievement while coordinating with IT, compliance and risk teams to strengthen security posture.

Strong experience in SIEM/EDR/IDS-IPS, vulnerability management, and secure incident handling is preferred to advance