Security Analyst L1

Ensign InfoSecurity; Jakarta Pusat; On-site; IDR 240,000,000 - 360,000,000; Full time

Job summary

Ensign InfoSecurity in Jakarta is seeking an experienced Incident Response Analyst to join a 24/7 SOC. You will act as first responder, monitor security sensors and logs, and identify anomalies across a large, heterogeneous device fleet.

The role involves incident escalation, collaboration with threat intelligence, and support for MDR monitoring and remediation with clients. The position requires strong analytical skills, rapid decision-making, and the ability to work across shifts in a

Qualifications

• Experience as an incident responder or SOC analyst is preferred.
• Familiarity with security monitoring, logs, and anomaly detection.
• Knowledge of incident handling procedures and escalation workflows.

Responsibilities

• Act as Incident first responder for a 24/7 staffed SOC.
• Perform security monitoring, vulnerability management, data loss / policy violation prevention and threat hunting.
• Monitor security sensors and review logs to identify network anomalies or intrusions.
• Provide analysis from monitoring and assessment of security log data from many heterogeneous devices.
• Escalate security incidents using established policies in a timely manner.
• Liaise with customers on security intrusions, identify root cause and recommend mitigations.
• Perform initial analysis of security events, network traffic, and logs.
• Assist with development of incident response plans, workflows, and SOPs.
• Work with threat intelligence analysts to convert intelligence into detection.
• Monitor MDR platforms and perform analysis for notifications.
• Perform response actions on MDR platforms based on client workflows.
• Act as liaison for configured alerts to monitor performance of sensors and tools.
• Fulfil Change Requests, Service Requests and respond to inquiries regarding Incident Management

Skills

Incident response

Security monitoring

Threat hunting

Log analysis

MDR platforms

Tools

MDR platforms

Security sensors

Job description

Requirements

• Act as Incident first responder for a 24/7 staffed SOC
• Perform security monitoring, vulnerability management, data loss / policy violation prevention and threat hunting
• Monitor security sensors and review logs to identify network anomalies or intrusions
• Provide analysis from monitoring, research and assessment of security log data from a large number of heterogeneous security devices
• Escalate security incidents using established policies and procedures in a timely manner
• Liaise with Ensign customers on security intrusions, identifying root cause and recommend mitigation step(s)/ remedial action(s)
• Perform initial analysis of security events, network traffic, and logs
• Assist with the development of incident response plans, workflows, and SOPs
• Work directly with threat intelligence analysts to convert intelligence into useful detection
• Monitoring the Managed Endpoint and Detection Response (MDR) platforms and performing analysis for notifications
• Performing Response action on Managed Endpoint and Detection Response (MDR) platforms based on standardize workflow and agreement with clients.
• Act as a liaison party for configured alerts to monitor performance of security sensors and tools
• Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management

Preferred Skills /Qualities

• Professional information technology/security certifications such as ITIL, CCNA and CEH will be preferred but related qualification (i.e. GCIA, CISSP etc.) will be an advantage