Cyber Defense Incident Responder (SOC)

RecruiterPal; Indonesia; Hybrid; IDR 89,280,000 - 167,400,000; Full time

Job summary

ALTO Network is seeking a Security Operations professional to triage alerts, assist in incident response, and conduct initial investigations. You will monitor SIEM, IDS/IPS, and EDR tools while supporting senior analysts in containment and recovery.

The role focuses on coordinating with internal teams and partners, executing governance practices, and building incident response readiness across the organization.

Qualifications

• Foundational cybersecurity principles and concepts.
• Knowledge of common threats and attack vectors.
• Experience with incident triage and security tooling best practices.
• Ability to communicate findings and coordinate responses.

Responsibilities

• Assist in triaging security alerts and incidents by severity and urgency.
• Coordinate incident response with internal teams and partners.
• Conduct preliminary investigations to identify signs of compromise.
• Monitor SIEM, IDS/IPS, and EDR for potential incidents.
• Support senior analysts in containment, eradication and recovery.
• Perform risk/findings audits and ensure governance awareness.
• Ensure staff are informed and trained in governance practices.

Skills

Cybersecurity knowledge

Cybersecurity concepts

Cybersecurity best practices

Common threats

Problem-Solving

Adaptability

Time management

Tools

SIEM

IDS/IPS

EDR

Scripting (PowerShell, Python)

Job description

COMPANY DESCRIPTION

ALTO Network is a leading payment infrastructure provider as well as the pioneer in payment solution by always bringing the most innovative and impactful technology to connect merchants or financial institutions with their customers to grow their businesses nationwide and beyond.

RESPONSIBILITIES

• Assist in triaging security alerts and incidents to determine their severity, impact, and urgency, escalating critical incidents to senior analysts or incident response leads as needed.


• Communicate effectively with internal teams, stakeholders, and external partners to coordinate incident response efforts, share information, and provide updates on the status of security incidents.


• Conduct preliminary investigations into security incidents, gathering and analyzing data to identify signs of compromise, suspicious activity, or unauthorized access.


• Monitor security alerts generated by various security tools and systems, including SIEM, IDS/IPS, and endpoint detection platforms, to identify potential security incidents.


• Provide support to senior incident response analysts during incident response activities, including containment, eradication, and recovery efforts, to minimize the impact of security incidents.


• Risk/Findings audit to be fulfilled


• Ensure staff are informed and trained to support good corporate governance in their specific areas of work.

QUALIFICATIONS

Knowledge

1. Cybersecurity principles


2. Cybersecurity concepts


3. Cybersecurity best practices


4. Common security threats and attack vectors.

Non-technical

1. Problem-Solving


2. Adaptability


3. Time Management Skills

Technical

1. SIEM (Security Information and Event Management)


2. IDS/IPS (Intrusion Detection and Prevention Systems)


3. EDR (Endpoint Detection and Response)


4. Scripting languages (e.g., PowerShell, Python) for automation