Security Engineer
Responsible for the implementation, configuration, tuning, and daily operations of the XDR (Extended Detection & Response) platform for both managed service clients and project delivery engagements. This role ensures the proper deployment of XDR agents across client endpoints and servers and the optimal configuration of detection rules and correlation logic, while also supporting the SOC team in the triage, investigation, and response processes regarding security incidents. The XDR Security Engineer also serves as the technical point of contact for XDR-related technical issues at the delivery and daily operational levels.
Responsibilities
XDR Platform Deployment & Configuration
Detection Engineering & Tuning
Incident Response & SOC Support
Managed Service Operations & Reporting
Dokumentasi & Continuous Improvement
Install and roll out XDR agents across client endpoints, servers, and workloads in accordance with the project scope
Perform initial platform configuration, including policies, exclusions, and integration with existing EDR/NDR/SIEM systems
Qualifications
Bachelor’s degree (S1) in Computer Science, Information Technology, Cybersecurity, or a related field
Minimum 3–5 years of experience in cybersecurity or security engineering
Hands-on experience with the deployment and operation of XDR/EDR/NDR platforms
Detection engineering skills: writing/tuning correlation rules and use cases
Familiarity with the MITRE ATT&CK framework and threat intelligence
Foundational understanding of networking, operating systems (Windows/Linux), and endpoint security likeVendors: SentinelOne, CrowdStrike, Microsoft Defender, Fidelis, or equivalent
Having certificate CEH, CompTIA Security+, GIAC (GCIH/GCFA), or equivalent will be point plus
Ability to communicate technical information to SOC teams and clients
High attention to detail in investigations and technical documentation