Security Analyst

PT ITSEC Asia Tbk; Indonesia; Vor Ort; IDR 89.280.000 - 178.560.000; Vollzeit

Zusammenfassung

PT ITSEC Asia Tbk in Indonesia seeks an L1 Security Analyst to monitor and investigate security events, assess threats, and support incident response in coordination with IT and business units. You will mentor L1 colleagues, refine detection rules, perform threat hunting, document findings, and align content with MITRE ATT&CK to strengthen defenses.

Candidates should have 3–5 years of relevant experience, strong SIEM/XDR skills, knowledge of vulnerability assessment, and solid communication for

Qualifikationen

• Graduates from D3, D4, or S1.
• 3–5 years of experience as an L1 Security Analyst.
• In-depth understanding of network and endpoint security.
• Hands-on experience with SIEM (Splunk, Sentinel, QRadar, Elastic) and XDR tools (e.g., Cortex, Ms Defender, TM-Vision1, CrowdStrike, SentinelOne).
• Knowledge of threat intelligence, IOCs, and MITRE ATT&CK framework.
• Understanding of the incident response lifecycle.
• Familiarity with vulnerability assessment methods.
• Intermediate analytical and investigative skills.
• Ability to correlate data from multiple sources.
• Clear documentation and reporting skills.
• Effective communication with technical and non-technical teams.
• Incident handling under pressure.
• Relevant certifications highly preferred (e.g., CEH, CSIR, CySA+).

Aufgaben

• Investigate escalated alerts from L1 and assess threat impact, scope, and root cause.
• Mentor & coach L1 in investigating & analyzing security events with SIEM & XDR tools as needed.
• Provide timely incident response support in coordination with IT and business units.
• Perform threat intelligence analysis and correlate external IOCs/TTPs.
• Design and implement strategies to contain threats and to initiate recovery efforts in coordination with relevant teams.
• Review and refine detection rules, correlation logic, response playbooks, and incident response procedures.
• Perform continuous threat hunting as a proactive activity against emerging cyber threats within the existing SIEM tools.
• Create and maintain SOP & response documentation.
• Maintain and update change management and incident tracking calendars.
• Maintain detailed hunt documentation, findings, and recommendations for remediation and prevention.
• Create and maintain detection content aligned with MITRE ATT&CK and other threat frameworks.

Kenntnisse

L1 Security Analyst

Threat hunting

Incident response

SIEM & XDR expertise

Data correlation

Communication under pressure

Ausbildung

D3/D4/S1 degree

Tools

Splunk

Sentinel

QRadar

Elastic

Cortex

Microsoft Defender for Endpoint

TM-Vision1

CrowdStrike

SentinelOne

Jobbeschreibung

Responsibilities

• Investigate escalated alerts from L1 and assess threat impact, scope, and root cause.


• Mentor & coach L1 in investigating & analyzing the security events with SIEM & XDR tools as needed.


• Provide timely incident response support in coordination with IT and business units.


• Perform threat intelligence analysis and correlate external IOCs/TTPs.


• Design and implement strategies to contain threats and to initiate recovery efforts in coordination with relevant teams.


• Review and refine detection rules, correlation logic, response playbooks, and incident response procedures to maintain relevance and effectiveness.


• Perform continuous threat hunting as a proactive activity against emerging cyber threats within the existing SIEM tools.


• Create and maintain SOP & response documentation.


• Maintain and update change management and incident tracking calendars.


• Maintain detailed hunt documentation, findings, and recommendations for remediation and prevention.


• Create and maintain detection content aligned with MITRE ATT&CK and other threat frameworks

Requirements

• Graduates from D3, D4, or S1.


• 3-5 years of working experience as an L1 Security Analyst.


• In-depth understanding of network and endpoint security.


• Hands-on experience with SIEM (Splunk, Sentinel, QRadar, Elastic), XDR tools (e.g., Cortex, Ms Defender, TM-Vision1, CrowdStrike, SentinelOne).


• Knowledge of threat intelligence, IOCs, and MITRE ATT&CK framework.


• Understanding of the incident response lifecycle.


• Familiarity with vulnerability assessment methods.


• Intermediate analytical and investigative skills.


• Ability to correlate data from multiple sources.


• Clear documentation and reporting skills.


• Effective communication with technical and non-technical teams.


• Incident handling under pressure.


• Relevant certifications highly preferred (e.g., BTL1, CIHE, ECIH, CHFI, BTL2, eJPT, eWPT, CEH, eCTHP, CySA+, MS-200).