Security Analyst L1

Ensign InfoSecurity; Indonesia; On-site; IDR 100,440,000 - 167,400,000; Full time

Job summary

Ensign InfoSecurity is hiring a Security Analyst L1 to act as the first responder in a 24/7 SOC. You will monitor security events, review logs, and coordinate remediation with customers and internal teams.

The role requires understanding of networks, OS and cryptography, plus strong written reporting skills. You will assist with incident response planning, workflows and SOPs, and work with threat intelligence analysts to translate intel into practical detections.

Qualifications

• Diploma or degree in Information System or Information Security is required.
• Basic knowledge of network routing and switching, including MPLS.
• Solid understanding of OS, network architecture and design fundamentals.
• Ability to analyze problems, identify root causes and propose solutions.
• Excellent written communication for incident reports and updates.

Responsibilities

• Act as incident first responder for a 24/7 staffed SOC.
• Monitor security events, logs and alerts to identify anomalies or intrusions.
• Escalate incidents according to policy and procedures in a timely manner.
• Coordinate with customers and internal teams to identify root causes and remediation steps.
• Contribute to incident response playbooks, SOPs and workflows.
• Support threat intel analysis and convert intel into practical detections.

Skills

Networking fundamentals

Operating systems

Encryption basics

Problem analysis

Documentation writing

Education

Diploma/Degree in Information System or Information Security

Job description

## Security Analyst L1Apply: Indonesia: Full time: Posted Yesterday: JOBREQ-0003653Ensign is hiring !L1**Responsibilities**· Act as Incident first responder for a 24/7 staffed SOC· Perform security monitoring, vulnerability management, data loss / policy violation prevention and threat hunting· Monitor security sensors and review logs to identify network anomalies or intrusions· Provide analysis from monitoring, research and assessment of security log data from a large number of heterogeneous security devices· Escalate security incidents using established policies and procedures in a timely manner· Liaise with Ensign customers on security intrusions, identifying root cause and recommend mitigation step(s)/ remedial action(s)· Perform initial analysis of security events, network traffic, and logs· Assist with the development of incident response plans, workflows, and SOPs· Work directly with threat intelligence analysts to convert intelligence into useful detection· Monitoring the Managed Endpoint and Detection Response (MDR) platforms and performing analysis for notifications· Performing Response action on Managed Endpoint and Detection Response (MDR) platforms based on standardize workflow and agreement with clients.· Act as a liaison party for configured alerts to monitor performance of security sensors and tools· Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management**Requirements**· Diploma/Degree in Information System/Information Security from a recognized institution· 1 year of working experience in networking environment· Basic, yet sound knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS)· Basic, yet sound technical understanding of operating systems, network architecture and design· Has understanding of network, server and application fundamentals, and its protocols within OSI layer framework· Basic, yet sound knowledge of encryption, key management and cryptology· Proven ability to plan and prioritize work, both their own and that of project team· Sound understanding of organizational issues and challenges. Able to work effectively with participants at all levels in an organization· Ability to analyze problems and determine root causes, generating alternatives, evaluating and selecting alternatives and implementing solutions· Possess excellent writing skills and the ability to communicate to teammates as well as technical and executive level staff**Preferred Skills /Qualities**· Professional information technology/security certifications such as ITIL, CCNA and CEH will be preferred but related qualification (i.e. GCIA, CISSP etc.) will be an advantage**Other Special Working Conditions**· Able to perform 12-hour shift duties (2 days’ work with 2 off-days). Working hours: AM - 8:30am to 8:30pm; PM - 8:30pm to 8:30am. Shift patterns and duration may vary from time to time