SOC Engineer – L1 Security Operations | Bandung Onsite

Ninjaone; Indonesia; On-site; IDR 180,000,000 - 300,000,000; Full time

Job summary

NinjaOne seeks a Security Observability Engineer to join its SOC team in Bandung, Indonesia. You will monitor alerts from SIEM/EDR/IDS and other tools, perform L1 triage, and escalate incidents to the appropriate teams.

The role involves standard incident response procedures, ticketing, and reporting on trends and metrics. You will work with cloud infrastructure and on-prem systems, applying MITRE ATT&CK guidance and bolstering security controls.

Qualifications

• Diploma or degree in Computer Science, Cybersecurity, or related field.
• Minimum 2 years of experience in IT support, SOC, or related security operations environment.
• Familiarity with SIEM platforms (e.g., Splunk, Sentinel, Chronicle) and security monitoring tools (EDR, IDS/IPS, DLP, CASB, CNAPP, CSPM).
• Basic understanding of networking concepts, firewalls, cloud infrastructure (AWS/GCP), and endpoint security.
• Strong problem-solving, analytical, and investigative skills.

Responsibilities

• Monitor security alerts, events, and logs from multiple sources for potential threats.
• Perform first-level triage and classify incidents by severity; escalate as needed.
• Investigate suspicious activities, malware detections, phishing attempts, and data loss alerts.
• Execute SOPs for incident response, containment, and remediation at L1 level.
• Create and track incident tickets to closure with timely stakeholder communication.
• Collaborate with IT, engineering, and security teams to validate alerts and enforce controls.
• Conduct daily health checks of monitoring systems; ensure data accuracy.
• Assist vulnerability triage by reviewing scan results and guiding remediation.
• Generate reports on security incidents, trends, and SOC metrics for management.
• Stay current with emerging threats and SOC/SIEM best practices.
• Contribute to SOC workflows and runbooks to improve efficiency.

Skills

SIEM

EDR

IDS/IPS

Cloud Security

Networking

Python

Incident Response

Security Certifications

Education

Diploma/degree in CS or Cybersecurity

Tools

Splunk

Sentinel

Chronicle

DLP

CASB

CNAPP

CSPM

Job description

NinjaOne seeks a Security Observability Engineer to join its SOC team in Bandung, Indonesia. You will monitor alerts from SIEM/EDR/IDS and other tools, perform L1 triage, and escalate incidents to the appropriate teams.

The role involves standard incident response procedures, ticketing, and reporting on trends and metrics. You will work with cloud infrastructure and on-prem systems, applying MITRE ATT&CK guidance and bolstering security controls.