Senior SOC Threat Hunter & DFIR Engineer

Sagara Technology; Kota Bandung; On-site; IDR 240,000,000 - 420,000,000; Full time

Job summary

SAGARA Technology in Bandung is seeking an experienced SOC Analyst L3 to investigate advanced threats, hunt for APTs, and lead DFIR responses in a high-security environment. You will develop SIEM rules, leverage Google SecOps, and mentor junior analysts while shaping incident response strategies.

Fluent Bahasa Indonesia and English are preferred. This full-time position is based in Bandung, Indonesia, with opportunities to influence security posture across Southeast Asia.

Qualifications

• 4–5+ years in Blue Team, DFIR, or Red Team roles.
• Strong digital forensics tool and malware analysis knowledge.
• Deep understanding of cloud architectures (GCP, AWS, Azure).
• Knowledge of Active Directory internals and OS internals.
• Experience in SIEM detection engineering, preferably Google SecOps.
• Scripting and automation proficiency.
• Excellent communication skills in Bahasa Indonesia and English.
• Certifications such as GCFA, GNFA, GCTI, OSCP, CISSP, GCP/ AWS Security are preferred.

Responsibilities

• Conduct threat hunting to identify threats that evade automated detection.
• Lead responses to major security incidents and data breaches.
• Perform DFIR including memory forensics and malware analysis.
• Develop and optimize SIEM detection rules with YARA-L, Sigma, YARA, KQL, SPL.
• Leverage threat intelligence to improve detections.
• Design and implement SOAR automation for IR processes.
• Develop incident response strategies and procedures.
• Provide mentorship to SOC L1/L2 analysts.

Skills

Threat Hunting

Detection Engineering

DFIR

Threat Intelligence

Scripting & Automation

GCP

AWS

Azure

Active Directory internals

SIEM engineering

YARA-L

Sigma

YARA

KQL

SPL

APT Investigation

Education

GCFA

GNFA

GCTI

OSCP

CISSP

GCP Professional Cloud Security Engineer

AWS Certified Security – Specialty

Tools

YARA-L

Sigma

YARA

KQL

SPL

Google SecOps

Memory Forensics

Disk Imaging

Malware Analysis

SOAR

Job description

SAGARA Technology in Bandung is seeking an experienced SOC Analyst L3 to investigate advanced threats, hunt for APTs, and lead DFIR responses in a high-security environment. You will develop SIEM rules, leverage Google SecOps, and mentor junior analysts while shaping incident response strategies.

Fluent Bahasa Indonesia and English are preferred. This full-time position is based in Bandung, Indonesia, with opportunities to influence security posture across Southeast Asia.