Job description for SIEM Platform Engineer at PT Tricada Intronik
RESPONSIBILITIES
- Identify security gaps and define security use cases.
- Develop and test detection rules, parsers, connectors, and monitoring capabilities.
- Build and validate proof-of-concepts in lab environments.
- Measure detection effectiveness, accuracy, and performance.
- Collaborate with engineering teams to implement security solutions.
- Contribute to security design reviews and detection coverage improvements.
- Maintain detection content, documentation, and capability backlogs.
- Develop reusable security components and automation.
- Leverage AI tools to accelerate development and documentation.
- Support presales activities, customer demonstrations, and technical discussions.
REQUIREMENTS
- Bachelor’s degree in IT, Computer Science, Cybersecurity, Telecommunication Engineering, or a related field.
- 1–3 years of experience in Security Engineering, SIEM/SOC, Detection Engineering, or related roles.
- Understanding of SIEM, security monitoring, and alert triage.
- Experience with detection rules, MITRE ATT&CK, and false-positive tuning.
- Familiarity with security log sources such as firewalls, EDR, Windows/Linux, Active Directory, and cloud platforms.
- Basic programming or scripting skills (Python preferred).
- Knowledge of SIEM platforms, APIs, Git, Docker, and Kubernetes.
- Familiarity with at least one SIEM solution (Wazuh, Splunk, QRadar, Sentinel, Elastic, etc.).
- Strong analytical, communication, and problem-solving skills.
- Security certifications and threat intelligence knowledge are a plus.
