Senior Threat Hunter & Incident Response Engineer

Jedi Solutions; Jakarta Utara; On-site; IDR 200,000,000 - 500,000,000; Full time

Job summary

Jedi Solutions is hiring a Threat Hunter & Incident Response Engineer to enhance detection capabilities and lead proactive security investigations in Jakarta, Indonesia. You will develop detection rules using Sigma and YARA, perform DFIR activities, monitor threats, and provide guidance to SOC analysts.

Collaboration with SOC and Security Engineering teams is essential to strengthen monitoring coverage and incident response capabilities.

Qualifications

• Experience in security operations and incident response.
• Proficient with DFIR methodologies and threat hunting.
• Knowledge of detection rules and use-case development.

Responsibilities

• Develop and maintain detection capabilities using Sigma, YARA and other rules.
• Perform DFIR activities to support incident investigation, containment and root cause analysis.
• Monitor and analyze daily cybersecurity threats, vulnerabilities, advisories and attack techniques.
• Conduct periodic SOC visibility and log coverage assessments to identify gaps.
• Perform IOC analysis and enrichment from logs and threat intel.
• Develop and refine detection use cases and correlation rules based on IOCs and TTPs.
• Maintain documentation for detection capabilities including logic, rules and validation.
• Conduct PoC, testing, validation and quality assessment of new detections before production.
• Carry out threat hunting to identify suspicious activity and indicators of compromise.
• Provide knowledge transfer and guidance to SOC Analysts to improve capabilities.
• Collaborate with SOC and Security Engineering to improve detection coverage and monitoring.

Skills

Network

Incident response

Operating systems

DFIR

Threat hunting

Detection eng

Tools

Sigma

YARA

Job description

Jedi Solutions is hiring a Threat Hunter & Incident Response Engineer to enhance detection capabilities and lead proactive security investigations in Jakarta, Indonesia. You will develop detection rules using Sigma and YARA, perform DFIR activities, monitor threats, and provide guidance to SOC analysts.

Collaboration with SOC and Security Engineering teams is essential to strengthen monitoring coverage and incident response capabilities.