Senior SOC Platform Engineer: SIEM/SOAR/EDR Architect

PT Karya Solusi Prima Sejahtera; Jakarta Pusat; On-site; IDR 446,400,000 - 669,600,000; Full time

Job summary

PT Karya Solusi Prima Sejahtera is seeking a SOC Platform Engineer to own architecture, maintenance, and health of security platforms. You will design high-volume log pipelines and build API integrations to automate incident workflows.

The ideal candidate has 5–7 years in Infra/DevOps, with 3+ years in Splunk ES environments, and strong Linux/Windows, Python, and IaC skills. This role is based in Jakarta, with a focus on 24/7 platform availability.

Qualifications

• 5–7 years in Infrastructure/DevOps/Enterprise Admin roles.
• 3+ years designing, deploying, and managing large Splunk environments (ES).
• Proficient in Linux (RHEL/Ubuntu) and Windows Server.
• Programming/scripting for automation: Python, Bash, or Go; REST APIs.
• Strong IaC and DevOps experience with Terraform, Ansible, Docker, Kubernetes.
• Experience with Splunk ES optimization: DMA, CIM, license management (Cribl).
• Splunk certs (ES Architect/Consultant/Admin) are a plus; security certs valued.

Responsibilities

• Manage full lifecycle of SOC platform (SIEM, SOAR, EDR, TIP) including architecture and patching.
• Design and operate high-volume log pipelines across cloud, network, and endpoints.
• Create custom API integrations to connect security tools and automate incident playbooks.
• Optimize query performance and log storage; ensure 24/7 platform availability.
• Implement data model integrations aligned with CIM/RBA standards; DR and redundancy.

Skills

Splunk

Python

Bash

Go

REST API

Terraform

Ansible

Docker

Kubernetes

CIM

DMA

Cribl Stream

Splunk ES

Splunk Certified

Tools

Heavy Forwarder

ES Data Models

Job description

PT Karya Solusi Prima Sejahtera is seeking a SOC Platform Engineer to own architecture, maintenance, and health of security platforms. You will design high-volume log pipelines and build API integrations to automate incident workflows.

The ideal candidate has 5–7 years in Infra/DevOps, with 3+ years in Splunk ES environments, and strong Linux/Windows, Python, and IaC skills. This role is based in Jakarta, with a focus on 24/7 platform availability.