Security Analyst

PT ITSEC Asia Tbk; Jakarta Pusat; On-site; IDR 180,000,000 - 300,000,000; Full time

Job summary

PT ITSEC Asia Tbk in Jakarta is seeking an experienced L1 Security Analyst to investigate escalated alerts, assess threat impact, and coordinate incident response with IT and business units.

You will mentor junior analysts, perform threat intelligence analysis, and help design containment and recovery strategies while refining detection rules and playbooks for ongoing security improvements.

Qualifications

• 3-5 years of L1 security analyst experience.
• In-depth understanding of network and endpoint security.
• Hands-on experience with SIEM and XDR tools.
• Knowledge of threat intelligence, IOCs, and MITRE ATT&CK framework.
• Understanding of the incident response lifecycle.
• Familiarity with vulnerability assessment methods.
• Intermediate analytical and investigative skills.
• Ability to correlate data from multiple sources.
• Clear documentation and reporting skills.
• Effective communication with technical and non-technical teams.

Responsibilities

• Investigate escalated alerts from L1 and assess threat impact, scope, and root cause.
• Mentor & coach L1 in investigating and analyzing security events with SIEM & XDR tools as needed.
• Provide timely incident response support in coordination with IT and business units.
• Perform threat intelligence analysis and correlate external IOCs/TTPs.
• Design and implement strategies to contain threats and initiate recovery efforts in coordination with relevant teams.
• Review and refine detection rules, correlation logic, response playbooks, and incident response procedures to maintain relevance and effectiveness.
• Perform continuous threat hunting as a proactive activity against emerging cyber threats within the existing SIEM tools.
• Create and maintain SOP and response documentation.
• Maintain and update change management and incident tracking calendars.
• Maintain detailed hunt documentation, findings, and recommendations for remediation and prevention.
• Create and maintain detection content aligned with MITRE ATT&CK and other threat frameworks

Skills

SIEM

Threat intel

Incident response

Data correlation

Documentation

Education

Graduates from D3/D4/S1

Tools

Splunk

Sentinel

QRadar

Elastic

Cortex

CrowdStrike

SentinelOne

Job description

• Investigate escalated alerts from L1 and assess threat impact, scope, and root cause.
• Mentor & coach L1 in investigating & analyzing the security events with SIEM & XDR tools as needed.
• Provide timely incident response support in coordination with IT and business units.
• Perform threat intelligence analysis and correlate external IOCs/TTPs.
• Design and implement strategies to contain threats and to initiate recovery efforts in coordination with relevant teams.
• Review and refine detection rules, correlation logic, response playbooks, and incident response procedures to maintain relevance and effectiveness.
• Perform continuous threat hunting as a proactive activity against emerging cyber threats within the existing SIEM tools.
• Create and maintain SOP & response documentation.
• Maintain and update change management and incident tracking calendars.
• Maintain detailed hunt documentation, findings, and recommendations for remediation and prevention.
• Create and maintain detection content aligned with MITRE ATT&CK and other threat frameworks

Responsibilities

• Investigate escalated alerts from L1 and assess threat impact, scope, and root cause.
• Mentor & coach L1 in investigating & analyzing the security events with SIEM & XDR tools as needed.
• Provide timely incident response support in coordination with IT and business units.
• Perform threat intelligence analysis and correlate external IOCs/TTPs.
• Design and implement strategies to contain threats and to initiate recovery efforts in coordination with relevant teams.
• Review and refine detection rules, correlation logic, response playbooks, and incident response procedures to maintain relevance and effectiveness.
• Perform continuous threat hunting as a proactive activity against emerging cyber threats within the existing SIEM tools.
• Create and maintain SOP & response documentation.
• Maintain and update change management and incident tracking calendars.
• Maintain detailed hunt documentation, findings, and recommendations for remediation and prevention.
• Create and maintain detection content aligned with MITRE ATT&CK and other threat frameworks

Requirements

• Graduates from D3, D4, or S1.
• 3-5 years of working experience as an L1 Security Analyst.
• In-depth understanding of network and endpoint security.
• Hands-on experience with SIEM (Splunk, Sentinel, QRadar, Elastic), XDR tools (e.g., Cortex, Ms Defender, TM-Vision1, CrowdStrike, SentinelOne).
• Knowledge of threat intelligence, IOCs, and MITRE ATT&CK framework.
• Understanding of the incident response lifecycle.
• Familiarity with vulnerability assessment methods.
• Intermediate analytical and investigative skills.
• Ability to correlate data from multiple sources.
• Clear documentation and reporting skills.
• Effective communication with technical and non-technical teams.
• Incident handling under pressure.
• Relevant certifications highly preferred (e.g., BTL1, CIHE, ECIH, CHFI, BTL2, eJPT, eWPT, CEH, eCTHP, CySA+, MS-200).