SOC Lead: Blue Team & Threat Hunting Leader

PT ASABA Digital Innotech; Jakarta Utara; On-site; IDR 350,000,000 - 600,000,000; Full time

Job summary

PT ASABA Digital Innotech is seeking a seasoned Security Operations Center (SOC) lead to oversee daily SOC activities, threat detection, and incident response. You will manage SIEM, SOAR, EDR/XDR, IDS/IPS, and Firewall platforms while guiding threat hunting, forensics, and root-cause analysis.

The role requires 3+ years in cybersecurity, a relevant degree, and strong leadership with cross-functional collaboration.

Qualifications

• Bachelor's degree in cybersecurity, IT, CS, or related field.
• Minimum 3 years in cybersecurity or security operations.
• Hands-on with SIEM, SOAR, EDR/XDR, Threat Intel, IR.
• Experience with threat hunting, forensics, malware analysis.
• Knowledge of MITRE ATT&CK, NIST CSF, ISO27001, Zero Trust.
• Experience leading cross-functional incident response.
• Preferred certifications: CISSP, GCIH, GCIA, CEH, or equivalent.

Responsibilities

• Lead and manage day-to-day SOC activities.
• Oversee security monitoring, threat detection, incident investigation, and response processes.
• Manage and optimize security technologies (SIEM, SOAR, EDR/XDR, IDS/IPS, Firewall).
• Lead threat hunting, digital forensics, and root cause analysis for incidents.
• Develop and maintain SOC playbooks, runbooks, detection use cases, and response procedures.
• Manage incident triage, prioritization, escalation, and remediation actions.
• Establish and improve security policies, procedures, and risk mitigation strategies.
• Monitor SOC performance via KPIs, SLAs, and continuous improvement.

Skills

Security Operations

Incident Response

Threat Hunting

Digital Forensics

Leadership

Analytical Thinking

Education

Bachelor's Degree in Cybersecurity/IT/CS

Tools

SIEM

SOAR

EDR/XDR

IDS/IPS

Firewall

Job description

PT ASABA Digital Innotech is seeking a seasoned Security Operations Center (SOC) lead to oversee daily SOC activities, threat detection, and incident response. You will manage SIEM, SOAR, EDR/XDR, IDS/IPS, and Firewall platforms while guiding threat hunting, forensics, and root-cause analysis.

The role requires 3+ years in cybersecurity, a relevant degree, and strong leadership with cross-functional collaboration.