Senior Analyst / Lead, Cyber Defence (SOC)
circles · Indonesia ·
- Seniority
- Lead
- Experience
- 6+ years
circles · Indonesia ·
Founded in 2014, Circles is a global technology company reimagining the telco industry with its innovative SaaS platform, empowering telco operators worldwide to effortlessly launch innovative digital brands or refresh existing ones, accelerating their transformation into techcos.
Today, Circles partners with leading telco operators across multiple countries and continents, including KDDI Corporation, Etisalat Group (e&), AT&T, and Telkomsel, creating blueprints for future telco and digital experiences enjoyed by millions of consumers globally.
Besides its SaaS business, Circles operates three other distinct businesses:
Circles is backed by renowned global investors, including Peak XV Partners (formerly Sequoia), Warburg Pincus, Founders Fund, and EDBI (the investment arm of the Singapore Economic Development Board), with a track record of backing industry challengers.
Standard Title - Senior Analyst / Lead, Cyber Defence (SOC)
Role – Senior Analyst / Lead SOC Analyst (Security Platform Engineering & Automation)
As a Security Platform Engineer & SOC Specialist, you will play a pivotal role in strengthening Circles’ cyber defence posture by engineering and automating the core security platforms that power our global SOC. You’ll design, enhance, and maintain the security infrastructure—ranging from SIEM and SOAR platforms to threat detection pipelines and vulnerability testing environments.
You will also lead offensive security initiatives including penetration testing and red team simulations, enabling proactive detection, rapid response, and continuous improvement of Circles’ security resilience.
What We’re Looking For:
Bachelor's degree in Computer Science, Engineering, or related field (or equivalent experience).
6+ years of hands-on SOC Platform engineering, Incident management and PEN testing experience.
Experience with SIEM tools (Graylog, Splunk, ELK, Rapid7, LogRhythm, QRadar).
Relevant certifications (GCIH, GCIA, Splunk/QRadar) are a plus.
SOC Platform Engineering
Architect, deploy, and optimize SIEM/SOAR platforms (e.g., Splunk, ELK, QRadar) with scalable log ingestion, enrichment, and correlation pipelines.
Build automation frameworks and SOAR playbooks to streamline alert enrichment, response orchestration, and remediation workflows.
Integrate custom telemetry and hybrid-cloud data sources to enhance SOC observability and adaptive threat detection.
Develop Python/Bash-based automation and AI/ML-driven logic for intelligent alert triage, noise reduction, and continuous detection improvements.
Continuously refine data normalization, parsing, and correlation logic to maximize SIEM performance and response efficiency.
Penetration Testing & Threat Simulation
Lead periodic penetration testing, red teaming, and adversary emulation exercises to identify and exploit vulnerabilities across infrastructure, applications, and cloud systems, assessing detection and response effectiveness.
Close the detection gaps, enhance response workflows, and perform post-exploitation analysis, developing custom exploit chains for advanced testing scenarios.
Incident Response & Continuous Improvement
Support SOC operations during high-severity incidents, leveraging automation, engineering improvements, and proactive collaboration with internal and client teams for rapid containment and resolution.
Develop and maintain threat detection content, runbooks, and correlation logic aligned with the MITRE ATT&CK framework to strengthen detection and response capabilities.
Drive continuous improvement of SOC tooling and automation, evaluating and integrating emerging technologies, open-source frameworks, and advanced analytics.
Act as a key client-facing representative, providing technical insights, incident summaries, and security recommendations that translate complex SOC findings into actionable outcomes.
Flexibility:
Ability to work in 24x7 environments as per business needs.
Circles is committed to a diverse and inclusive workplace. We are an equal opportunity employer and do not discriminate on the basis of race, national origin, gender, disability or age.
By submitting an application for this position, you, as the applicant, or your authorised representative(s), consent to Circles’ Candidate Data Protection and Privacy Policy. You also agree to the collection, use, and/or disclosure of your personal data by us solely for recruitment purposes as specified in the Policy. You acknowledge that you have read and understood the Policy, are aware of your rights regarding your personal data, and accept the terms relating to international data transfers, where applicable. You further understand that you may withdraw consent at any time, which may affect our ability to consider your application. In instances where your personal data or application is submitted by a third party, it is understood that such third party has been duly authorised by you to disclose the relevant personal data and provide consent on your behalf, and that you have been made aware of this Policy.
To all recruitment agencies: Circles will only acknowledge resumes shared by recruitment agencies if selected in our preferred supplier partnership program.
Please do not forward resumes to our jobs alias, Circles, employees or any other company location. Circles will not be held accountable for any fees related to unsolicited resumes not uploaded via our ATS.