T&T Experienced Analyst - SOC Engineer - ID

Deloitte SEA; Jakarta Pusat; On-site; IDR 240,000,000 - 450,000,000; Full time

Job summary

At Deloitte Southeast Asia, a leading professional services firm, we seek a T&T Experienced Analyst - SOC Engineer to protect client environments and lead Cyber Operations.

You will design, implement and optimize SIEM/XDR architectures, oversee threat detection, incident response, and ensure alignment with security frameworks, while developing a strong security culture across teams.

Qualifications

• Bachelor's degree in computer science, cybersecurity, or a related field.
• Minimum 2 years of SOC Engineering experience.
• Hands-on with SIEM platforms (Splunk, Sentinel, QRadar, Elastic).
• Strong knowledge of MITRE ATT&CK mapping.
• Incident response and digital forensics experience.
• Log parsing and query writing (KQL, SPL).

Responsibilities

• Lead the SOC team to manage security operations and threats.
• Design and implement enterprise SecOps architecture (SIEM, SOAR, EDR/XDR).
• Develop detection rules and use cases.
• Coordinate incident response and runbooks.
• Align with governance frameworks (NIST CSF, ISO 27001, CIS).

Skills

SIEM expertise

MITRE ATT&CK knowledge

Incident response

Digital forensics

Log parsing

Leadership

Education

Bachelor’s degree in computer science / cybersecurity

Tools

Splunk

Sentinel

QRadar

Elastic

Job description

T&T Experienced Analyst - SOC Engineer - ID

Location: Jakarta, ID

Are you ready to unleash your potential?

At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve.

We believe we have a responsibility to be a force for good, and WorldImpact is our portfolio of initiatives focused on making a tangible impact on society’s biggest challenges and creating a better future. We strive to advise clients on how to deliver purpose-led growth and embed more equitable, inclusive as well as sustainable business practices.

Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals.

We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognized for their contributions.

Ready to unleash your potential with us? Join the winning team now!

What you'll do

As a Security Operations Center (SOC) Engineer at Deloitte, you will lead the SOC team in providing a secure environment through continuous management and coordination of Security Information and Event Management (SIEM) systems. You will play a strategic and critical leadership role in overseeing security operations, identifying and mitigating cyber risks, and ensuring robust security measures are in place to protect our clients.

• Design and implement enterprise SecOps architecture (SIEM, SOAR, EDR/XDR, Threat Intelligence, IAM integration)
• Define log collection strategy across cloud, on-prem, SaaS, endpoints, and network
• Architect detection strategy aligned to MITRE ATT&CK
• Establish monitoring coverage and telemetry standards
• Define security tooling roadmap and integration patterns

2. Implementation & Setup

• Deploy and configure SIEM/XDR platforms
• Develop detection rules and use cases
• Integrate security tools (EDR, NDR, IAM, cloud security, vulnerability management)
• Build SOAR playbooks and automation workflows
• Establish alert tuning and noise reduction process

3. Process Development

• Develop incident response procedures and runbooks
• Define severity classification and escalation matrix
• Establish SLA/SLO for detection and response
• Build case management and ticketing workflowsImplement threat hunting lifecycle
• Conduct tabletop exercises

4. Governance & Compliance Alignment

• Align SecOps to: NIST CSF, ISO 27001, MITRE ATT&CK, CIS Controls
• Support audits and regulatory assessments
• Document architecture and processes

Your role as a leader

At Deloitte, we believe in the importance of empowering our people to be leaders at all levels. We connect our purpose and shared values to identify issues as well as to make an impact that matters to our clients, people and the communities. Additionally, Analysts across our Firm are expected to:

• Establish a strong leadership brand and inspire their team through passion, integrity, and appreciation of others.
• Make effective use of resources to optimise value.
• Demonstrate the success and efficiency of Deloitte through leveraging its network and people.
• Deliver exceptional quality results and stakeholder value by leveraging each person’s strengths to build high performing teams across businesses and borders.
• Apply deep knowledge of disruptive trends and competitor activity to drive continuous improvement.
• Build deep professional relationships across a diverse network and use a flexible influencing style to gain buy-in and drive impact.
• Translate broader strategy into a compelling team vision and goals as well as align the team and sets priorities to achieve objectives.
• Contribute to building an inclusive talent pipeline by creating a talent experience that attracts, develops and retains diverse, top talent and high performing teams.

Requirements

• Bachelor’s degree in computer science, cybersecurity, or a related field.
• min 2 years of experience in SOC Engineering scope.
• Experience in Security Operations / SOC
• Hands-on experience with SIEM platforms (e.g., Splunk, Sentinel, QRadar, Elastic)
• Strong knowledge of MITRE ATT&CK mapping
• Incident response and digital forensics experience
• Log parsing and query writing (KQL, SPL, etc.)
• Strong analytical, problem-solving, and decision-making skills.
• Excellent communication and leadership abilities.
• Relevant certifications (e.g., CISSP, CISM, CEH) are highly preferred.

Due to volume of applications, we regret that only shortlisted candidates will be notified.

In Indonesia, the services are provided by Imelda & Rekan and other related entities in Indonesia ("Deloitte in Indonesia"), which are affiliates of Deloitte Southeast Asia Ltd. Deloitte Southeast Asia Ltd is a member firm of Deloitte Touche Tohmatsu Limited. Deloitte in Indonesia, which is within the Deloitte Network, is the entity that is providing this Website.