Security Engineer

Location: Jakarta, Indonesia Type: Contract | HybridThe Opportunity: You are the "force multiplier." Your job is to make the team faster and smarter. You will own the platform engineering, ensuring data gets in correctly, writing detection rules, and building automation playbooks so the analysts can focus on threats, not repetitive tasks.Key Responsibilities:Content Engineering: Develop and tune detection rules (e.g., YARA-L) to catch specific threats while minimizing noise.Threat Mapping: Work closely with threat intelligence and IR teams to translate new attack methodologies (using the MITRE ATT&CK framework) into actionable detection content.Data Integration: Manage log ingestion, build parsers, and ensure healthy data flows from client environments to our cloud platform.Pipeline Management and Normalization: Own the end-to-end security data lifecycle, managing pipeline scalability, performing log parsing and normalization, and automating tool integrationAutomation (SOAR): Build automated playbooks to handle routine tasks (e.g., IP blocking, password resets) to reduce manual workload.Platform Health: Monitor the performance and stability of the SIEM/SOAR infrastructure.24/7 Standby Duty: Participate in a rotating on-call schedule to address critical platform/infrastructure outages.Requirements:At least 4+ years of experience in Security Engineering, DevOps, or a related technical field.Experience with scripting and coding (Python, API integration, RegEx).Familiarity with writing detection logic (YARA-L, Sigma, or Snort).Experience with cloud platforms (Google Cloud, AWS, or Azure).A "builder" mindset—you love solving problems with code and automation.