T&T Senior Manager - SOC Engineer - ID

Deloitte Southeast Asia; Jakarta Pusat; On-site; IDR 700,000,000 - 1,000,000,000; Full time

Job summary

Deloitte Southeast Asia in Jakarta, Indonesia, is seeking a Security Operations Center (SOC) Engineering Manager to lead the SOC team in delivering a secure environment through SIEM, SOAR, EDR/XDR and threat intelligence.

You will define log collection, architect MITRE ATT&CK-aligned detection, establish telemetry standards, and drive incident response and governance aligned to NIST/ISO. This is a senior leadership role requiring 8+ years in SOC with strong leadership.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, or a related field.

Responsibilities

• Lead the SOC team to deliver a secure environment through SIEM/SOAR/EDR-XDR and threat intel.

Skills

SIEM platforms

MITRE ATT&CK mapping

Incident response

Digital forensics

Log parsing / query writing

Leadership & mentoring

Communication skills

Security certifications

Education

Bachelor’s degree in computer science, cybersecurity, or a related field

Tools

Splunk

Microsoft Sentinel

IBM QRadar

Elastic SIEM

Job description

Location: Jakarta, ID

Are you ready to unleash your potential?

At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve.

We believe we have a responsibility to be a force for good, and WorldImpact is our portfolio of initiatives focused on making a tangible impact on society’s biggest challenges and creating a better future. We strive to advise clients on how to deliver purpose-led growth and embed more equitable, inclusive as well as sustainable business practices.

Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals.

We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognized for their contributions.

Ready to unleash your potential with us? Join the winning team now!

What you'll do

As a Security Operations Center (SOC) Engineering Manager at Deloitte, you will lead the SOC team in providing a secure environment through continuous management and coordination of Security Information and Event Management (SIEM) systems. You will play a strategic and critical leadership role in overseeing security operations, identifying and mitigating cyber risks, and ensuring robust security measures are in place to protect our clients.

• Design and implement enterprise SecOps architecture (SIEM, SOAR, EDR/XDR, Threat Intelligence, IAM integration)
• Define log collection strategy across cloud, on-prem, SaaS, endpoints, and network
• Architect detection strategy aligned to MITRE ATT&CK
• Establish monitoring coverage and telemetry standards
• Define security tooling roadmap and integration patterns

2. Implementation & Setup

• Deploy and configure SIEM/XDR platforms
• Develop detection rules and use cases
• Integrate security tools (EDR, NDR, IAM, cloud security, vulnerability management)
• Build SOAR playbooks and automation workflows
• Establish alert tuning and noise reduction process

3. Process Development

• Develop incident response procedures and runbooks
• Define severity classification and escalation matrix
• Establish SLA/SLO for detection and response
• Build case management and ticketing workflows
• Implement threat hunting lifecycle
• Conduct tabletop exercises

4. Governance & Compliance Alignment

• Align SecOps to: NIST CSF, ISO 27001, MITRE ATT&CK, CIS Controls
• Support audits and regulatory assessments
• Document architecture and processes

Your role as a leader

At Deloitte, we believe in the importance of empowering our people to be leaders at all levels. We connect our purpose and shared values to identify issues as well as to make an impact that matters to our clients, people and the communities. Additionally, Managers across our Firm are expected to:

• Establish a strong leadership brand and inspire their team through passion, integrity, and appreciation of others.
• Make effective use of resources to optimise value.
• Demonstrate the success and efficiency of Deloitte through leveraging its network and people.
• Deliver exceptional quality results and stakeholder value by leveraging each person’s strengths to build high performing teams across businesses and borders.
• Apply deep knowledge of disruptive trends and competitor activity to drive continuous improvement.
• Build deep professional relationships across a diverse network and use a flexible influencing style to gain buy-in and drive impact.
• Translate broader strategy into a compelling team vision and goals as well as align the team and sets priorities to achieve objectives.
• Contribute to building an inclusive talent pipeline by creating a talent experience that attracts, develops and retains diverse, top talent and high performing teams.

Requirements

• Bachelor’s degree in computer science, cybersecurity, or a related field.
• 8+ years of experience in SOC Engineering scope.
• Experience in Security Operations / SOC
• Hands-on experience with SIEM platforms (e.g., Splunk, Sentinel, QRadar, Elastic)
• Strong knowledge of MITRE ATT&CK mapping
• Incident response and digital forensics experience
• Log parsing and query writing (KQL, SPL, etc.)
• Strong analytical, problem-solving, and decision‑making skills.
• Excellent communication and leadership abilities.
• Relevant certifications (e.g., CISSP, CISM, CEH) are highly preferred.

Due to volume of applications, we regret that only shortlisted candidates will be notified.

In Indonesia, the services are provided by Imelda & Rekan and other related entities in Indonesia ("Deloitte in Indonesia"), which are affiliates of Deloitte Southeast Asia Ltd. Deloitte Southeast Asia Ltd is a member firm of Deloitte Touche Tohmatsu Limited. Deloitte in Indonesia, which is within the Deloitte Network, is the entity that is providing this Website.