Sr. Security Engineer

PT ITSEC Asia Tbk; Jakarta Pusat; On-site; IDR 390,600,000 - 613,800,000; Full time

Job summary

PT ITSEC Asia Tbk is seeking a Senior Cybersecurity Engineer in Jakarta to design, deploy, and maintain enterprise security monitoring platforms. You will architect Splunk Enterprise environments and lead SIEM initiatives with a focus on scalability, HA, and disaster recovery.

Responsibilities include developing dashboards, SPL queries, and correlation searches, integrating diverse log sources, and mentoring junior engineers while engaging with customers during deployments and workshops.

Qualifications

• Bachelor's degree required in a relevant field.
• Minimum 4 years of cybersecurity engineering experience.
• Hands-on with design, deployment, and administration of Splunk Enterprise.
• Strong understanding of SIEM architecture and log management.
• Advanced SPL proficiency.
• Experience with ES and SOAR is a plus.
• Strong Linux admin skills (RHEL/Ubuntu/CentOS).
• Experience with scripting (Python, Bash, PowerShell).
• Familiarity with cloud platforms and networking fundamentals.
• Ability to lead technical projects and mentor engineers.

Responsibilities

• Design, deploy, and maintain enterprise security monitoring platforms.
• Architect and optimize Splunk Enterprise environments.
• Design scalable SIEM architecture with HA and DR.
• Develop dashboards, reports, alerts, and SPL queries.
• Optimize indexing, search, storage, and platform health.
• Integrate log sources from OS, network, cloud, apps, and security tools.
• Integrate Firewalls, IDS/IPS, WAF, EDR/XDR, IAM, and vulnerability platforms.
• Administer Linux servers supporting security platforms.
• Perform installations, upgrades, patches, and performance tuning.
• Support incident response, threat hunting, and monitoring activities.
• Produce documentation (HLD/LLD/MOP/SOP/runbooks/KB).
• Lead customer workshops, deployments, and implementations.
• Mentor security engineers and provide technical leadership.

Skills

Splunk SPL

Security monitoring

Documentation

Customer-facing

Project leadership

Linux administration

Python scripting

Scripting (Shell)

Troubleshooting

Networking knowledge

Education

Bachelor's degree in Computer Science / IT / Cyber Security

Tools

Splunk Enterprise

Splunk Enterprise Security

Splunk SOAR

Docker

Kubernetes

Terraform

Ansible

AWS

Azure

GCP

Job description

Responsibilities

• Design, deploy, and maintain enterprise security monitoring platforms.
• Architect, implement, and optimize Splunk Enterprise environments.
• Design SIEM architecture for scalability, high availability, and disaster recovery.
• Develop dashboards, reports, alerts, correlation searches, and SPL queries.
• Optimize indexing, search performance, storage utilization, and overall platform health.
• Integrate log sources from operating systems, network devices, cloud platforms, enterprise applications, and security solutions.
• Integrate enterprise security technologies including Firewalls, IDS/IPS, WAF, EDR/XDR, IAM, Vulnerability Management, and Threat Intelligence platforms.
• Administer Linux servers supporting security platforms.
• Perform platform installation, upgrades, patching, performance tuning, and troubleshooting.
• Support incident investigation, threat hunting, and security monitoring activities.
• Produce technical documentation including HLD, LLD, MOP, SOP, runbooks, and knowledge base articles.
• Lead customer workshops, deployments, and technical implementation activities.
• Mentor Security Engineers and provide technical leadership throughout project delivery.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cyber Security, or a related field.
• Minimum 4yearsof experience in cybersecurity engineering.
• Hands-on experience designing, deploying, and administering Splunk Enterprise.
• Strong understanding of SIEM architecture, log management, and security monitoring.
• Advanced proficiency with Splunk Search Processing Language (SPL).
• Experience with Splunk Enterprise Security (ES) and Splunk SOAR is an advantage.
• Strong Linux administration skills (RHEL, Rocky Linux, Ubuntu, or CentOS).
• Experience with Python, Bash, or PowerShell scripting.
• Experience with Docker, Kubernetes, Terraform, or Ansible is an advantage.
• Strong understanding of TCP/IP networking, Routing & Switching, VLAN, DNS, DHCP, NAT, VPN, SSL/TLS, and Load Balancers.
• Experience implementing or integrating Firewalls, IDS/IPS, WAF, EDR/XDR, Active Directory, IAM, Vulnerability Management, and Threat Intelligence platforms.
• Familiarity with AWS, Azure, or Google Cloud Platform.
• Strong analytical, troubleshooting, documentation, communication, and customer-facing skills.
• Ability to lead technical projects and mentor junior engineers.

Preferred Certifications

• Splunk Enterprise Certified Architect
• Networking Certifications
• GIAC Certifications