Cyber Security Analyst

PT Bumi Amartha Teknologi Mandiri; Jakarta Pusat; On-site; IDR 279,000,000 - 502,200,000; Full time

Job summary

PT Bumi Amartha Teknologi Mandiri (AMARTEK) seeks a Detection Engineer to join our on-site team in Jakarta. The role focuses on detecting threats using Elastic SIEM, improving detection rules, and coordinating incident response with SOC teams.

The candidate will review logs, implement mitigations, and drive security projects including IAM, MFA, and cloud security configurations. A strong background in SIEM operations and security architecture is required.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Information Systems, or related discipline.
• Minimum 3-6 years of experience in cybersecurity, preferably in SOC or SIEM operations.
• Hands-on experience with Elastic SIEM / ELK Stack or equivalent SIEM platforms.
• Strong analytical skills in understanding network, application, and system-level threats and logs.
• Solid understanding of system/solution architecture and ability to recommend secure design alternatives.
• Detail-oriented with strong problem-solving abilities and root cause analysis skills.
• Excellent communication skills; able to collaborate across technical and nontechnical teams.
• Self-driven, quick learner, and able to work independently with minimal supervision.
• Certifications such as CEH, CompTIA Security+, GCIH, or Elastic Certified Analyst are a plus.

Responsibilities

• Utilize a combination of leading security technologies and SIEM tools to detect, classify, and respond to security threats.
• Propose mitigations and long-term solutions for identified threats, vulnerabilities, and recurring incidents.
• Review, assess and identify improvement plans for all detection rules over security platforms especially on SIEM.
• Monitor security alerts and incidents from SIEM and other tools.
• Lead response efforts for security incidents and breaches.
• Perform root cause analysis and recommend remediation steps.
• Plan, implement, and upgrade cybersecurity controls and monitoring mechanisms.
• Provide technical support during incident investigations.
• Develop correlation rules, visual dashboards, and automated alerting in Elastic/Kibana.
• Define and improve cybersecurity methodologies, processes, and tools used by analysts and engineers.

Skills

Elastic SIEM

Threat detection

Incident response

Log analysis

Security engineering

Security automation

Education

Bachelor's degree in Computer Science/Information Technology/Information Systems

Tools

ELK Stack/Elastic SIEM

Job description

DESKRIPSI PEKERJAAN

• Utilize a combination of leading security technologies and SIEM tools (Including Elastic SIEM) to detect, classify, and respond to security threats, in coordination with the L1 SOC team and L2 team.
• Propose feasible mitigations and long-term solutions for identified threats, vulnerabilities, and recurring incidents.
• As Detection engineer, to perform review, Assess and identify improvement plan for all detection rules over security platforms especially on SIEM.
• Perform review and assessments over the logs of security platforms as well as the effectiveness of Cyber security Platforms
• Leading the Cyber Security Project implementation, including XDR, DLP, HSM, SIEM improvement, BYOD, Cloud Security, Patch Management tool, Privilege Access management
• Monitor security alerts and incidents from SIEM and other tools.
• Analyze threat intelligence and suspicious activities across systems
• Enforce secure configurations for servers, endpoints, and cloud resources.
• Apply patches and security updates in coordination with IT teams.
• Implement and manage IAM, MFA, and privileged access systems
• Ensure least privilege access principles are followed Lead response efforts for security incidents and breaches.
• Perform root cause analysis and recommend remediation steps.
• Plan, implement, and upgrade cybersecurity controls and monitoring mechanisms to align with evolving threat landscapes.
• Provide technical support during incident investigations.
• Automate ad improve response capabilities using scripting/tools.
• Continuously enhance threat detection capabilities by developing correlation rules, visual dashboards, and automated alerting in Elastic/Kibana.
• Define and improve cybersecurity methodologies, processes, and tools used by analysts and engineers.
• Review and endorse security-related documentation such as system architecture, test plans, and technical designs to ensure secure-by-design principles are followed.

KUALIFIKASI MINIMUM

• Bachelor's degree in Computer Science, Information Technology, Information Systems, or related discipline.
• Minimum 3-6 years of experience in cybersecurity, preferably in SOC or SIEM operations.
• Hands-on experience with Elastic SIEM / ELK Stack or equivalent SIEM platforms.
• Strong analytical skills in understanding network, application, and system-level threats and logs.
• Solid understanding of system/solution architecture and ability to recommend secure design alternatives.
• Detail-oriented with strong problem-solving abilities and root cause analysis skills.
• Excellent communication skills; able to collaborate across technical and nontechnical teams.
• Self-driven, quick learner, and able to work independently with minimal supervision.
• Certifications such as CEH, CompTIA Security+, GCIH, or Elastic Certified Analyst are a plus.

RINGKASAN PERKERJAAN

• *SPESIALISASI**: IT and Software
• *PENDIDIKAN MINIMAL**: S1 (Sarjana)
• *SISTEM KERJA**: On-site
• *TIPE PEKERJAAN**: Contractual
• *LOKASI**: Central Jakarta, DKI Jakarta, Indonesia
• *INDUSTRI**: Information Technology / IT
• *SITUS PERUSAHAAN**: https://www.amartek.id/

TENTANG PERUSAHAAN

Bumi Amartha Teknologi Mandiri or “AMARTEK” was established to provide information technology solutions. Our mission from the very first day has been to cultivate professional relationships with our clients to provide effective and reliable information technology solutions for their needs. The team at "AMARTEK" is equipped with a highly developed skillset developed over decades of experience not only in information technology but also in business processes across a range of industry sectors. This business experience makes us uniquely positioned to offer solutions promising greater operational efficiency, productivity gains and cost savings for each of our clients, regardless of their industry.

As an established technology-intensive company, we pride ourselves on providing a comprehensive suite of solutions comprising of Infrastructure Consultancy, on/offsite services, Custom software and web development, Talent Augmentation, and enterprise architecture consulting. Our team consistently delivers state-of-the-art solutions in various areas including, but not limited to: integrated business solutions, system applications, product development and professional services.

At "AMARTEK", we guarantee rapid, reliable and robust information technology solutions that work.