Remote CSOC Analyst — Detection & Incident Response

BTSE; Jakarta Pusat; Hybrid; IDR 150,000,000 - 230,000,000; Full time

Benefits offered by this job

Competitive total compensation package

Various team-building programs and公司与社

And many more!

Job summary

BTSE is seeking a Cyber Security Operations Center (CSOC) Analyst with 3-4 years of security monitoring and incident response experience to join a lean, high-ownership security team. You'll work with our MSSP and internal engineering teams to turn threat intel into action, write detection logic, and own incidents end-to-end.

You will develop detection rules, validate use cases, and contribute to insider threat monitoring while ensuring proper documentation and playbooks are in place.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, or related field.
• 3-4 years in a SOC or equivalent security monitoring/detection engineering role.
• Hands-on with SIEM rule development and query writing (ES/QL, EQL, KQL).
• Ability to read raw logs and perform incident triage and enrichment.
• Proficiency in Python scripting for automation and tooling.
• Familiarity with MITRE ATT&CK and incident response frameworks (NIST/SANS).
• Experience with cloud security across AWS/Azure/GCP.

Responsibilities

• Triage, analyze, and escalate security alerts across SIEM, EDR/XDR, WAF, email security, and cloud logs.
• Own incidents end-to-end and develop playbooks and updated detection logic.
• Develop, tune, and validate SIEM detection rules and run validation exercises.
• Convert threat intel and hunting queries into defined, actionable responses.
• Support insider threat monitoring and identity/privilege anomaly detection.
• Verify MSSP tooling works and onboarding of log pipelines.
• Document playbooks and rationale to preserve institutional knowledge.
• Contribute to automation to reduce repetitive triage tasks.
• Collaborate with internal stakeholders and regional partners.

Skills

SOC experience

SIEM

Python scripting

Cloud security

MITRE ATT&CK

Incident response

Education

Bachelor's degree in Cybersecurity/Information Technology/CS

Tools

SIEM platforms

EDR/XDR

WAF

Cloud logs

Job description

BTSE is seeking a Cyber Security Operations Center (CSOC) Analyst with 3-4 years of security monitoring and incident response experience to join a lean, high-ownership security team. You'll work with our MSSP and internal engineering teams to turn threat intel into action, write detection logic, and own incidents end-to-end.

You will develop detection rules, validate use cases, and contribute to insider threat monitoring while ensuring proper documentation and playbooks are in place.