Security Operations & Support Engineer
Security Operations & Support Engineer running end-to-end security operations across telecom core networks and IT infrastructure: real-time monitoring, threat detection, P1–P4 incident response, containment/recovery, RCA, and law-enforcement compliance coordination. Core stack: Zabbix/Grafana/SIEM, Linux, Python, Bash, SQL; 24x7 rotational shifts.
- Compensation
- Not disclosed
- Location
- South Jakarta, Jakarta
- Work setup
- Onsite
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 2+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in Cyber Security, Telecommunications Engineering, Computer Science, IT, or equivalent
- 2–4 years of experience in Security Operations (SOC), Network Security, or Telecom Security
- Experience in Telecommunications with strong understanding of Core Network domain
- Understanding of Telecom Core Network architecture, protocols, and security requirements
- Intermediate–advanced proficiency in Zabbix, Grafana, or SIEM platforms
- Strong hands-on Linux command line, administration, and security controls
- Mandatory proficiency in Python for security automation
- Working knowledge of Bash/Shell scripting
- Intermediate–advanced SQL for query execution, log analysis, and database security monitoring
- Understanding of networking protocols, API integration troubleshooting, SFTP security, and access control management
- Readiness to coordinate professionally with Law Enforcement Agencies
- Willingness to work a 24x7 rotational shift schedule
- Strong expertise in structured incident response, containment, and escalation workflows
- Demonstrated capability in Root Cause Analysis (RCA) and technical problem determination
Nice to have
- Relevant certifications (plus point / value add)
Full description
Job Overview
We are seeking a highly skilled Security Operations & Support Engineer to join our team. In this role, you will be responsible for end-to-end security operations across telecom core networks and IT infrastructure—ranging from real-time monitoring, threat detection, and incident response, to technical troubleshooting, root cause analysis (RCA), and legal compliance coordination. This position requires experience in telecommunications (specifically in the Core domain) and willingness to work on a rotational shift schedule.
Detailed Job Responsibilities
· Real-Time Security & Core Network Monitoring:
· Continuously monitor security dashboards, telecom core network activities, server/OS logs, and database metrics.
· Monitor network connectivity, API endpoints, data pipelines, and batch job executions for unauthorized activity, fraud, or anomalies.
· Incident Detection, Containment & Recovery:
· Detect security events and system anomalies, promptly creating structured incident tickets.
· Classify incident severity levels (P1 Critical, P2 High, P3 Medium, P4 Low) based on potential operational and business impact.
· Perform first-level containment and advanced troubleshooting for complex telecom security incidents.
· Execute application/service restarts, job reruns, and system recovery procedures.
· Regulatory & Law Enforcement Coordination:
· Serve as a technical point of contact to coordinate with Law Enforcement Agencies (LEAs) for lawful requests, data requests, and incident inquiries.
· Maintain strict compliance, audit trails, confidentiality, and chain of custody when handling sensitive data and legal requests.
· Root Cause Analysis (RCA) & Process Improvement:
· Lead Root Cause Analysis (RCA) investigations for major security incidents to identify underlying vulnerabilities and prevent recurrence.
· Author, update, and maintain comprehensive security SOPs and operational runbooks.
· Escalation & Vendor Coordination:
· Execute predefined read-only SQL queries to verify system health and audit logs.
· Collaborate with L3 engineering teams, telecom principals, or third-party vendors for major software defects, core network issues, or complex escalations.
Required Competencies & Qualifications
· Education: Bachelor’s degree in Cyber Security, Telecommunications Engineering, Computer Science, Information Technology, or equivalent.