Security Analyst L1

Ensign InfoSecurity; Jakarta Pusat; On-site; IDR 66,960,000 - 133,920,000; Full time

Job summary

Ensign InfoSecurity is seeking an Incident Response Analyst to join our 24/7 SOC operations. You will monitor logs, detect anomalies, and escalate incidents per policy while coordinating with customers on remediation steps.

The role emphasizes incident handling, analysis of events, and collaboration with threat intelligence teams to improve detections in a demanding security environment.

Qualifications

• Diploma/Degree in Information System/Information Security from a recognized institution.
• 1 year of working experience in networking environment.
• Basic knowledge of network routing and switching fundamentals including MPLS.
• Understanding of operating systems, network architecture and design.
• Knowledge of encryption, key management and cryptology.
• Ability to plan and prioritize work and manage tasks.
• Strong writing and communication skills for technical and executive audiences.
• Fresh graduates with passion for cyber security are welcome; extensive OJT and training provided.

Responsibilities

• Act as Incident first responder for a 24/7 staffed SOC.
• Monitor security platforms and review logs to identify network anomalies or intrusions.
• Escalate incidents using defined policies and procedures promptly.
• Liaise with customers on intrusions; identify root cause and recommend mitigations.
• Perform initial analysis of security events and logs.
• Assist with incident response plans, workflows, and SOPs.
• Work with threat intel analysts to convert intel into detections.
• Monitor MDR platforms and perform analysis for alerts.
• Execute response actions on MDR platforms per client workflows.
• Serve as liaison for configured alerts and monitor sensor performance.
• Fulfil Change Requests and Service Requests; respond to inquiries on Incident Management.

Skills

Networking fundamentals

OSI model understanding

Encryption basics

Analytical problem solving

Written communication

Prioritization & planning

Team collaboration

Cyber security interest

Education

Information Systems / Information Security degree

Tools

ITIL

CCNA

CEH

Job description

• Act as Incident first responder for a 24/7 staffed SOC
• Perform security monitoring, vulnerability management, data loss / policy violation prevention and threat hunting
• Monitor security sensors and review logs to identify network anomalies or intrusions
• Provide analysis from monitoring, research and assessment of security log data from a large number of heterogeneous security devices
• Escalate security incidents using established policies and procedures in a timely manner
• Liaise with Ensign customers on security intrusions, identifying root cause and recommend mitigation step(s)/ remedial action(s)
• Perform initial analysis of security events, network traffic, and logs
• Assist with the development of incident response plans, workflows, and SOPs
• Work directly with threat intelligence analysts to convert intelligence into useful detection
• Monitoring the Managed Endpoint and Detection Response (MDR) platforms and performing analysis for notifications
• Performing Response action on Managed Endpoint and Detection Response (MDR) platforms based on standardize workflow and agreement with clients.
• Act as a liaison party for configured alerts to monitor performance of security sensors and tools
• Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management

Requirements

• Diploma/Degree in Information System/Information Security from a recognized institution
• 1 year of working experience in networking environment
• Basic, yet sound knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS)
• Basic, yet sound technical understanding of operating systems, network architecture and design
• Has understanding of network, server and application fundamentals, and its protocols within OSI layer framework
• Basic, yet sound knowledge of encryption, key management and cryptology
• Proven ability to plan and prioritize work, both their own and that of project team
• Sound understanding of organizational issues and challenges. Able to work effectively with participants at all levels in an organization
• Ability to analyze problems and determine root causes, generating alternatives, evaluating and selecting alternatives and implementing solutions
• Possess excellent writing skills and the ability to communicate to teammates as well as technical and executive level staff
• Results Oriented
• Fresh graduates with passion for cyber security are welcome and they will be enrolled in an extensive On-Job-Training (OJT) and training for professional certification

Preferred Skills /Qualities

• Professional information technology/security certifications such as ITIL, CCNA and CEH will be preferred but related qualification (i.e. GCIA, CISSP etc.) will be an advantage