Назад
Company hidden
3 дня назад

Security Operations (SOC) Engineer (Cybersecurity)

Формат работы
onsite
Тип работы
fulltime
Грейд
middle
Английский
b2
Страна
Indonesia
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/

TL;DR

Security Operations (SOC) Engineer (Cybersecurity): Monitoring and protecting cloud and private infrastructure by detecting threats and performing surveillance of systems, networks, and security controls with an accent on L1 triage and incident escalation. Focus on analyzing security events, executing incident response SOPs, and improving SOC workflows and detection use cases.

Location: Onsite | Bandung, Indonesia

Company

hirify.global provides a Unified IT Operations Platform that delivers endpoint management, autonomous patching, backup, and remote access to simplify IT for nearly 40,000 customers globally.

What you will do

  • Monitor security alerts and logs from multiple sources including SIEM, IDS/IPS, EDR, cloud security tools, and firewalls.
  • Perform first-level triage of security alerts, classify incidents by severity, and escalate to relevant engineering departments.
  • Investigate suspicious activities such as malware detections, phishing attempts, and account compromise indicators.
  • Execute standard operating procedures (SOPs) for incident response, containment, and remediation at the L1 level.
  • Track incident tickets to closure and ensure communication with stakeholders in compliance with defined SLAs.
  • Collaborate with IT, engineering, and security teams to validate alerts, mitigate risks, and enforce security controls.

Requirements

  • Diploma or Degree in Computer Science, Cybersecurity, or a related field.
  • Minimum 2 years of experience in IT support, SOC, or a related security operations environment.
  • Familiarity with SIEM platforms (e.g., Splunk, Sentinel, Chronicle) and security tools (EDR, IDS/IPS, DLP, CASB).
  • Basic understanding of networking concepts, firewalls, and cloud infrastructure (AWS/GCP).
  • Knowledge of common attack vectors, MITRE ATT&CK framework, and incident response best practices.
  • Ability to work on rotational shifts and flexible hours, including nights and weekends.
  • Position is NOT eligible for Visa sponsorship.

Nice to have

  • Knowledge of scripting or automation using Python or PowerShell.
  • Security certifications such as CompTIA Security+, CySA+, CC, or equivalent.

Culture & Benefits

  • Collaborative, kind, and curious community with an international workforce.
  • Free in-office lunches throughout the week.
  • Opportunities for professional growth and advancement within a fast-growing global company.
  • Access to a renowned training platform for skill development.
  • Competitive compensation package.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →