CSOC Analyst - Threat Detection & Incident Response

Btse; Jakarta Pusat; Hybrid; IDR 180,000,000 - 360,000,000; Full time

Benefits offered by this job

Competitive compensation package

Team-building programs

Job summary

Btse in Jakarta, Indonesia seeks a Cyber Security Operations Center (CSOC) Analyst with 3–4 years of security monitoring experience. The role focuses on detection engineering, incident response, and collaboration with MSSP and internal teams. You will write playbooks, validate detections, and contribute to insider threat monitoring.

The position supports on-site, remote, or hybrid work arrangements with a lean security team aimed at reducing risk and improving detections.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, or related field.
• 3–4 years in SOC or equivalent security monitoring/detection engineering role.
• Hands-on experience with SIEM tools, detection rule development, and detection validation.

Responsibilities

• Triage, analyze, and escalate security alerts across SIEM/EDR/WAF and cloud logs.
• Own incidents end-to-end, document playbooks, and update detection logic.
• Develop, tune, and validate SIEM detection rules (ES|QL/EQL/KQL).
• Convert threat intel and hunting queries into actionable responses.
• Support insider threat monitoring and identity anomaly detection.
• Verify MSSP tooling and log pipelines are onboarded and functioning.

Skills

SOC analysis

Python scripting

Incident response

MITRE ATT&CK mapping

Documentation

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field

Tools

ES|QL/EQL/KQL

Cloud security (AWS/Azure/GCP)

Job description

Btse in Jakarta, Indonesia seeks a Cyber Security Operations Center (CSOC) Analyst with 3–4 years of security monitoring experience. The role focuses on detection engineering, incident response, and collaboration with MSSP and internal teams. You will write playbooks, validate detections, and contribute to insider threat monitoring.

The position supports on-site, remote, or hybrid work arrangements with a lean security team aimed at reducing risk and improving detections.