Security Analyst

Pt. Lintas Teknologi Indonesia; Daerah Khusus Ibukota Jakarta; On-site; IDR 10.000.000 - 15.000.000; Full time

Job summary

A technology solutions company in Jakarta is seeking an Analyst to join their Cyber Security Operations. The successful candidate will monitor security incidents, manage data loss prevention, and respond to alerts from various tools. A minimum of 1 year in an IT role is required, along with knowledge of security principles and firewalls. The position involves working a 24x7 shift pattern and requires strong communication and scripting skills.

Qualifications

• Minimum 1 year of working experience in IT environment.
• Strong experience with and understanding of firewalls, antivirus, and endpoint detection.
• Good working knowledge of Linux, including the ability to run command lines, edit files, and script.
• Willingness to work with a 24x7 shift pattern including weekend work.

Responsibilities

• Perform security monitoring and incident response.
• Enhance and build cyber threat detection use cases.
• Respond to inbound change requests and service requests.

Skills

TCP/IP knowledge

Networking

Operating systems

Cyber security concepts

Firewalls

Antivirus

Endpoint detection

Communication skills

Scripting (Python, Bash, PowerShell)

Education

Diploma/Degree in Information System/Information Security

Job description

Job Description

Analyst would be part of 24x7 Cyber Security Operations function to perform security monitoring and incident response, data loss prevention, vulnerability management. Perform monitoring, research, assessment and analysis on alerts from various security tools, including IDPS tools, SIEM, anomaly detection systems, firewalls, antivirus systems, user behavior analytics tools, endpoint inspection, and proxy devices. Follow pre-defined actions to investigate possible security incidents or perform incident response actions, including escalating to other support groups. Ensure proper functioning of systems in the Security Operations Centre. Enhance and build cyber threat detection use cases and assist in analyzing & reducing false positives. Support the development and enhancement of SOC incident response capabilities. Respond to inbound change requests (CRs), service requests (SRs), queries for handling incident management. Execute daily ad hoc tasks or lead projects as needed.

Requirements

• Minimum 1 year of working experience in IT environment.
• Diploma/Degree in Information System/Information Security from a recognized institution.
• Strong knowledge of TCP/IP, networking, operating systems and cyber security concepts.
• Strong experience with and understanding of firewalls, antivirus and endpoint detection.
• Good working knowledge of Linux, including the ability to run command lines, edit files and script.
• Knowledge of commonly‑accepted information security principles and practices, and techniques attackers would use to identify vulnerabilities, gain unauthorized access, elevate privileges and access restricted information.
• Solid understanding of threats reported by various data sources such as IDS/IPS, AV, HIDS/HIPS, WAFs, firewalls and web proxies.
• Excellent communication skills.
• Experience with scripting in Python, Bash or PowerShell is an advantage.
• Willingness to work with a 24x7 shift pattern that includes weekend work and extend shift hours if required.
• Willingness to be on standby for maintaining 24x7 SOC shifts.
• Hold one or more technical certifications (e.g., MCP, MSCE, CCNA Security, CEH, Security+, CSA).