XDR Security Engineer: Deployment, Detection & IR

amIT Global Solutions Sdn Bhd; Indonesia; On-site; IDR 180,000,000 - 300,000,000; Full time

Job summary

amIT Global Solutions Sdn Bhd is seeking an XDR Security Engineer to implement, configure, and operate the XDR platform for managed services and project delivery. You will deploy agents across client endpoints and servers, tune detection rules, and integrate with existing EDR/NDR/SIEM systems while supporting the SOC team.

This role requires 3–5 years in cybersecurity, a foundational knowledge of networking and operating systems, and the ability to document investigations and configurations

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 3–5 years of experience in cybersecurity or security engineering.
• Hands-on deployment and operation of XDR/EDR/NDR platforms.
• Detection engineering: writing/tuning correlation rules and use cases.
• Familiarity with the MITRE ATT&CK framework and threat intelligence.
• Foundational networking and operating systems knowledge; endpoint security tooling.
• Certifications (CEH, CompTIA Security+, GIAC) are a plus.

Responsibilities

• XDR Platform Deployment & Configuration
• Detection Engineering & Tuning
• Incident Response & SOC Support
• Managed Service Operations & Reporting
• Documentation & Continuous Improvement
• Install and roll out XDR agents across client endpoints, servers, and workloads as per project scope
• Initial platform configuration including policies, exclusions, and integration with EDR/NDR/SIEM systems

Skills

XDR deployment

Detection engineering

Incident response

SOC support

Reporting

Documentation

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

SentinelOne

CrowdStrike

Microsoft Defender

Fidelis

Job description

amIT Global Solutions Sdn Bhd is seeking an XDR Security Engineer to implement, configure, and operate the XDR platform for managed services and project delivery. You will deploy agents across client endpoints and servers, tune detection rules, and integrate with existing EDR/NDR/SIEM systems while supporting the SOC team.

This role requires 3–5 years in cybersecurity, a foundational knowledge of networking and operating systems, and the ability to document investigations and configurations