Senior Threat Hunter & Detection Engineering Lead

Lintasarta; Jakarta Pusat; On-site; IDR 40,000,000 - 70,000,000; Full time

Job summary

Lintasarta is seeking a senior threat hunter to generate proactive, data-driven hypotheses, scrutinize telemetry across endpoints, cloud, and network, and build scalable analytics pipelines to detect subtle anomalies. You will map attacker techniques to MITRE ATT&CK, develop automated detection logic (SIEM rules, EDR watchlists, YARA/Sigma), and conduct post-incident analyses to drive permanent hardening.

Collaborate with security architecture and engineering to define log-ingestion policies,

Qualifications

• 5–7+ years in cybersecurity roles.
• 2–3 years threat-hunting in enterprise environments.

Responsibilities

• Hypothesis generation: proactive data-driven threat hunting based on attacker behaviors and real-world threats.
• Stealth adversary detection across endpoints, cloud, and network telemetry to isolate APTs and insider threats.
• Data aggregation: build large-scale analytics pipelines and profile baselines to detect anomalies.
• Operationalizing threat intel: ingest IoBs and map tactics to MITRE ATT&CK in detection logic.
• Content development: translate discoveries into SIEM rules, EDR watchlists, and YARA/Sigma rules.
• Root-cause analysis: post-incident forensics to identify architectural flaws and hardening mitigations.

Skills

Python

PowerShell

Go

SQL

Tools

Splunk SPL

KQL

Velociraptor

KAPE

Sigma

YARA

Jupyter

Job description

Lintasarta is seeking a senior threat hunter to generate proactive, data-driven hypotheses, scrutinize telemetry across endpoints, cloud, and network, and build scalable analytics pipelines to detect subtle anomalies. You will map attacker techniques to MITRE ATT&CK, develop automated detection logic (SIEM rules, EDR watchlists, YARA/Sigma), and conduct post-incident analyses to drive permanent hardening.

Collaborate with security architecture and engineering to define log-ingestion policies,