Security Operations [SOC] Lead - ID (Ref: 26-BU005)

Nice to Meet You! We are Dropsuite, A NinjaOne Company! 

We are seeking a SOC Lead to join our Security Operations team to provide hands-on operational leadership for our Southeast Asia (SEA) coverage. This position reports into global SOC leadership and focuses on execution, quality control, and regional ownership of daily security operations. The SOC Lead works closely with other regional leads to ensure smooth handoffs, consistent standards, and continuous operational coverage. The ideal candidate is a highly competent security operations practitioner who is comfortable leading by example, making escalation decisions, and coaching junior analysts while remaining hands-on in investigations. 

Work Arrangement 

• Full-time position  

• Onsite work model (Monday to Friday, 5-day work week) 

• Eligible to reside and work in Bandung (Indonesian citizenship only) 

This position is open exclusively to candidates who reside in and are authorised to work in Indonesia. Only shortlisted candidates will be contacted. 

Key Accountabilities 

• Act as the senior on-shift security operations lead for SEA coverage 

• Serve as the primary escalation point for Tier 1 analysts in the region 

• Ensure consistent, high-quality alert triage, investigation, and documentation 

• Review and validate high-risk, ambiguous, or complex alerts before escalation 

• Perform hands-on investigations alongside analysts when needed 

• Own shift handoffs with EMEA and US leads to ensure continuity of operations 

• Maintain situational awareness of ongoing investigations and regional risk 

• Coach and mentor 1–2 SOC analysts, improving investigation quality and decision-making 

• Ensure playbooks, runbooks, and escalation paths are followed correctly 

• Identify recurring alert quality issues, false positives, and process gaps and raise them to global SOC leadership 

• Contribute to improving detection quality, operational workflows, and documentation standards 

• Represent SEA operations in cross-region SOC syncs and operational discussions 

Qualifications and Competencies 

• 5+ years of experience in SOC, security operations, or security monitoring roles 

• Prior experience as a senior analyst, shift lead, or acting lead in a SOC environment 

• Strong hands-on experience with: 

• Security alert triage and investigation 

• Incident severity assessment and escalation decisions 

• Coordinating investigations during active incidents 

• Strong understanding of: 

• Networking fundamentals (TCP/IP, DNS, HTTP/S) 

• Windows and macOS endpoint behavior 

• Cloud and SaaS logging concepts 

• Common attack techniques (phishing, credential abuse, malware, persistence) 

• Experience working with: SIEM platforms (Splunk, Panther, Sentinel, QRadar, etc.), EDR/XDR tools, and Cloud platforms (AWS, Azure, GCP) in a security operations context 

• Strong written and verbal English communication skills 

• Comfortable working in a distributed, global SOC environment 

Preferred Qualifications 

• Experience acting as an escalation point in a 24/7 or follow-the-sun SOC 

• Familiarity with the MITRE ATT&CK framework 

• Experience improving SOC playbooks, triage guidelines, or operational processes 

• Experience with ticketing and case management systems (Jira, ServiceNow, etc.) 

• Security certifications such as: Security+, SSCP, GCIH / GCIA / similar, Cloud security certifications (one or more preferred, not required) 

Key Skills 

• Strong operational judgment and decision-making 

• Calm and methodical approach during high-severity or high-ambiguity incidents 

• Ability to lead by example in hands-on investigations 

• Clear and structured written communication 

• Coaching and quality-focused mindset 

• Strong sense of ownership and accountability 

Why Join Us 
At Dropsuite, now proudly part of NinjaOne, we are on a mission to safeguard business information and help businesses stay in business. We are a global, fast-growing, partner-centric company building secure, scalable, and highly usable cloud backup technologies for businesses of all sizes. Today, we perform billions of backups daily for organizations across more than 100 countries. As we enter an exciting new chapter with NinjaOne—a leader in endpoint management, security, and IT automation—our combined strengths enable us to drive even greater impact, innovation, and global scale. Together, we are building a world-class platform that empowers IT teams with simplicity, performance, and reliability.
At our core, we are a team of hungry owners: we are tenacious in our pursuit of excellence and take full ownership in everything we do. We are deeply customer-focused, collaborative, and solutions-driven. We play as a team—respecting, supporting, and elevating one another every step of the way.
Join us as we shape the future of IT and data protection—powered by passion, purpose, and the spirit of ownership. 

Rewards That Go Beyond 

• Competitive compensation  

• Health insurance for you and your dependents  

• Social Security (BPJS Ketenagakerjaan)  

• Hybrid work model   

• 12 Days of Annual Leave   

• Entitled to Indonesia Public Holidays  

• Other leave benefits, such as Wedding leave  

• Free lunches in office 

• Growth opportunities  

• Work in a global company with meaningful work, highly skilled colleagues and an amazing culture 

Diversity and Inclusion Statement 
Dropsuite is an Equal Employment Opportunity and Affirmative Action Employer. Qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, or disability status.
As part of our recruitment process, we may collect personal data to support hiring-related activities such as screening, assessment, and communication. This information is collected solely for recruitment purposes and handled in accordance with applicable data protection and privacy regulations. Your data will be treated with strict confidentiality and used only to facilitate your application with us.