Security Engineer XDR

Responsible for the implementation, configuration, tuning, and daily operations of the XDR (Extended Detection & Response) platform for both managed service clients and project delivery engagements. This role ensures the proper deployment of XDR agents across client endpoints and servers and the optimal configuration of detection rules and correlation logic, while also supporting the SOC team in the triage, investigation, and response processes regarding security incidents. The XDR Security Engineer also serves as the technical point of contact for XDR-related technical issues at the delivery and daily operational levels.

Responsibilities

• XDR Platform Deployment & Configuration
• Detection Engineering & Tuning
• Incident Response & SOC Support
• Managed Service Operations & Reporting
• Dokumentasi & Continuous Improvement
• Install and roll out XDR agents across client endpoints, servers, and workloads in accordance with the project scope
• Perform initial platform configuration, including policies, exclusions, and integration with existing EDR/NDR/SIEM systems

Qualifications

• Bachelor's degree (S1) in Computer Science, Information Technology, Cybersecurity, or a related field
• Minimum 3–5 years of experience in cybersecurity or security engineering
• Hands-on experience with the deployment and operation of XDR/EDR/NDR platforms
• Detection engineering skills: writing/tuning correlation rules and use cases
• Familiarity with the MITRE ATT&CK framework and threat intelligence
• Foundational understanding of networking, operating systems (Windows/Linux), and endpoint security likeVendors: SentinelOne, CrowdStrike, Microsoft Defender, Fidelis, or equivalent
• Having certificate CEH, CompTIA Security+, GIAC (GCIH/GCFA), or equivalent will be point plus
• Ability to communicate technical information to SOC teams and clients
• High attention to detail in investigations and technical documentation