Security Analyst

PT ITSEC Asia Tbk; Jakarta Selatan; Presencial; IDR 120.000.000 - 180.000.000; Jornada completa

Descripción de la vacante

PT ITSEC Asia Tbk is seeking a seasoned L1 Security Analyst to investigate escalated alerts, assess risk, and guide L1 analysts using SIEM and XDR tools.

You will provide incident response support, perform threat intelligence analysis, and help refine detection rules and playbooks in collaboration with IT and business units. The role emphasizes documentation and cross-team communication.

Formación

• Graduates from D3, D4, or S1.
• 3-5 years of working experience as an L1 Security Analyst.
• In-depth understanding of network and endpoint security.
• Hands-on experience with SIEM (Splunk, Sentinel, QRadar, Elastic), XDR tools (e.g., Cortex, Ms Defender, TM-Vision1, CrowdStrike, SentinelOne).
• Knowledge of threat intelligence, IOCs, and MITRE ATT&CK framework.
• Understanding of the incident response lifecycle.
• Familiarity with vulnerability assessment methods.
• Intermediate analytical and investigative skills.
• Ability to correlate data from multiple sources.
• Clear documentation and reporting skills.
• Effective communication with technical and non-technical teams.
• Incident handling under pressure.
• Relevant certifications highly preferred (e.g., BTL1, CIHE, ECIH, CHFI, BTL2, eJPT, eWPT, CEH, eCTHP, CySA+, MS-200).

Responsabilidades

• Investigate escalated alerts from L1 and assess threat impact, scope, and root cause.
• Mentor & coach L1 in investigating & analyzing the security events with SIEM & XDR tools as needed.
• Provide timely incident response support in coordination with IT and business units.
• Perform threat intelligence analysis and correlate external IOCs/TTPs.
• Design and implement strategies to contain threats and to initiate recovery efforts in coordination with relevant teams.
• Review and refine detection rules, correlation logic, response playbooks, and incident response procedures to maintain relevance and effectiveness.
• Perform continuous threat hunting as a proactive activity against emerging cyber threats within the existing SIEM tools.
• Create and maintain SOP & response documentation.
• Maintain and update change management and incident tracking calendars.
• Maintain detailed hunt documentation, findings, and recommendations for remediation and prevention.
• Create and maintain detection content aligned with MITRE ATT&CK and other threat frameworks

Conocimientos

SIEM experience

XDR tools

Threat intelligence

MITRE ATT&CK

Incident response

Vulnerability assessment

Analytical skills

Documentation

Communication

Incident handling under pressure

Cybersecurity certifications

Network security

Endpoint security

Data correlation

Educación

D3/D4/S1 degree

Herramientas

Splunk

Sentinel

QRadar

Elastic

Cortex

Microsoft Defender

TM-Vision1

CrowdStrike

SentinelOne

Descripción del empleo

Job Responsibilities

• Investigate escalated alerts from L1 and assess threat impact, scope, and root cause.
• Mentor & coach L1 in investigating & analyzing the security events with SIEM & XDR tools as needed.
• Provide timely incident response support in coordination with IT and business units.
• Perform threat intelligence analysis and correlate external IOCs/TTPs.
• Design and implement strategies to contain threats and to initiate recovery efforts in coordination with relevant teams.
• Review and refine detection rules, correlation logic, response playbooks, and incident response procedures to maintain relevance and effectiveness.
• Perform continuous threat hunting as a proactive activity against emerging cyber threats within the existing SIEM tools.
• Create and maintain SOP & response documentation.
• Maintain and update change management and incident tracking calendars.
• Maintain detailed hunt documentation, findings, and recommendations for remediation and prevention.
• Create and maintain detection content aligned with MITRE ATT&CK and other threat frameworks

Qualifications

• Graduates from D3, D4, or S1.
• 3-5 years of working experience as an L1 Security Analyst.
• In-depth understanding of network and endpoint security.
• Hands-on experience with SIEM (Splunk, Sentinel, QRadar, Elastic), XDR tools (e.g., Cortex, Ms Defender, TM-Vision1, CrowdStrike, SentinelOne).
• Knowledge of threat intelligence, IOCs, and MITRE ATT&CK framework.
• Understanding of the incident response lifecycle.
• Familiarity with vulnerability assessment methods.
• Intermediate analytical and investigative skills.
• Ability to correlate data from multiple sources.
• Clear documentation and reporting skills.
• Effective communication with technical and non-technical teams.
• Incident handling under pressure.
• Relevant certifications highly preferred (e.g., BTL1, CIHE, ECIH, CHFI, BTL2, eJPT, eWPT, CEH, eCTHP, CySA+, MS-200).