Security Analyst L1

Ensign InfoSecurity; Indonesia; On-site; IDR 111,600,000 - 200,880,000; Full time

Job summary

Ensign InfoSecurity membuka posisi di SOC untuk melakukan respons insiden dan pemantauan keamanan secara berkelanjutan. Anda akan menilai data log dari berbagai perangkat keamanan, bekerja dengan analis intelijen ancaman, dan mengarahkan tindakan respons sesuai SOP.

Posisi ini mengharuskan pengalaman di lingkungan jaringan minimal 1 tahun serta pemahaman dasar tentang protokol dan desain OSI. Penempatan kerja melibatkan pekerjaan shift 12 jam dengan jadwal yang bervariasi.

Qualifications

• Memiliki Diploma/Sarjana di bidang Sistem Informasi/Keamanan Informasi dari institusi terakreditasi.
• Minimal 1 tahun pengalaman kerja di lingkungan jaringan.
• Pengetahuan dasar tentang routing/switching jaringan dan protokol OSI.
• Pemahaman dasar tentang OS, arsitektur jaringan, dan desain.
• Kemampuan analisis masalah, identifikasi akar penyebab, dan solusi.
• Keterampilan menulis yang baik untuk berkomunikasi dengan tim teknis dan eksekutif.

Responsibilities

• Menjadi responder insiden pertama untuk SOC 24/7 yang didukung.
• Melakukan pemantauan keamanan, manajemen kerentanan, serta pencegahan kebocoran data.
• Memantau sensor keamanan dan log untuk mengidentifikasi anomali jaringan.
• Menyediakan analisis dari pemantauan, riset, dan penilaian data log.
• Escalate insiden keamanan berdasarkan kebijakan yang ada dengan tepat waktu.
• Bekerja sama dengan pelanggan Ensign terkait intrusi keamanan, akar masalah, dan rekomendasi mitigasi.

Skills

Incident response

Security monitoring

Vulnerability mgmt

Threat hunting

Log analysis

Networking basics

Communication

Education

Diploma/Degree in Information System/Information Security

Tools

MDR platforms

SIEM

IPS/IDS

Job description

Ensign is hiring !

L1 Responsibilities

• Act as Incident first responder for a 24/7 staffed SOC
• Perform security monitoring, vulnerability management, data loss / policy violation prevention and threat hunting
• Monitor security sensors and review logs to identify network anomalies or intrusions
• Provide analysis from monitoring, research and assessment of security log data from a large number of heterogeneous security devices
• Escalate security incidents using established policies and procedures in a timely manner
• Liaise with Ensign customers on security intrusions, identifying root cause and recommend mitigation step(s)/ remedial action(s)
• Perform initial analysis of security events, network traffic, and logs
• Assist with the development of incident response plans, workflows, and SOPs
• Work directly with threat intelligence analysts to convert intelligence into useful detection
• Monitoring the Managed Endpoint and Detection Response (MDR) platforms and performing analysis for notifications
• Performing Response action on Managed Endpoint and Detection Response (MDR) platforms based on standardize workflow and agreement with clients.
• Act as a liaison party for configured alerts to monitor performance of security sensors and tools
• Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management Requirements
• Diploma/Degree in Information System/Information Security from a recognized institution
• 1 year of working experience in networking environment
• Basic, yet sound knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS)
• Basic, yet sound technical understanding of operating systems, network architecture and design
• Has understanding of network, server and application fundamentals, and its protocols within OSI layer framework
• Basic, yet sound knowledge of encryption, key management and cryptology
• Proven ability to plan and prioritize work, both their own and that of project team
• Sound understanding of organizational issues and challenges. Able to work effectively with participants at all levels in an organization
• Ability to analyze problems and determine root causes, generating alternatives, evaluating and selecting alternatives and implementing solutions
• Possess excellent writing skills and the ability to communicate to teammates as well as technical and executive level staff

Preferred Skills /Qualities

• Professional information technology/security certifications such as ITIL, CCNA and CEH will be preferred but related qualification (i.e. GCIA, CISSP etc.) will be an advantage

Other Special Working Conditions

Able to perform 12-hour shift duties (2 days’ work with 2 off-days). Working hours: AM - 8:30am to 8:30pm; PM - 8:30pm to 8:30am. Shift patterns and duration may vary from time to time

About Ensign InfoSecurity

Ensign InfoSecurity is the largest pure-play cybersecurity service provider in Asia. The company is headquartered in Singapore. We specialise in the provision of these services; cybersecurity advisory and assurance, implementation and management of advanced cybersecurity controls, cybersecurity monitoring, threat hunting, and incident response. Underpinning these competencies is in-house research and development in cybersecurity.

What Makes Ensign Special?

We are a technology company with warmth and soul. We are ambitious, propelled by our vision to be the cyber defender of choice, and fueled by the dedication and camaraderie of individuals who are eager to make a difference, and leave their footprints in the industry.

If you are a self-motivated curious go-getter, we want You! Join Us!