Security Operations Center Architect/Lead

Security Operations Center Architect/Lead As the Technical Security Operations Center (SOC) Architect/Lead, you will not just monitor screens; you will build the operational workflows, define our incident response protocols, and mentor the founding team. You will be the technical escalation point and the bridge between our Jakarta hub and our regional clients.

Key Responsibilities

Operational Leadership:

Establish standard operating procedures (SOPs) for detection, analysis, and response.

Incident Commander:

Act as the primary escalation point for high‑severity incidents, guiding the team through containment and eradication.

Client Onboarding:

Lead the technical onboarding of new clients, ensuring their data is correctly ingested and their specific threat landscape is understood.

Team Mentorship:

Train and mentor the initial analysts, fostering a culture of curiosity and excellence.

24/7 Standby Duty:

Participate in a rotating on‑call schedule to handle critical escalations outside of standard business hours.

Requirements

At least 8+ years of experience in a SOC or Incident Response role.

Strong command of English (for regional reporting) and Bahasa Indonesia.

Experience with modern SIEM/SOAR platforms (Google SecOps is a massive plus).

Proven expertise in leading all phases of the Incident Response lifecycle.

Proven ability to remain calm under pressure and lead a team during a crisis.

In‑depth knowledge of network protocols, operating system internals (Windows/Linux), cloud security (AWS, GCP, Azure), and common attack techniques (MITRE ATT&CK framework).

A strong bias for action and a willingness to "roll up your sleeves" to build documentation, playbooks, and processes from scratch.

Seniority Level Mid‑Senior level

Employment Type Contract

Job Function Information Technology and Engineering

Industries: IT Services and IT Consulting

#J-18808-Ljbffr