Security Analyst L1

Ensign Infosecurity; Provinsi Bali; On-site; IDR 180,000,000 - 280,000,000; Full time

Job summary

Ensign Infosecurity is seeking an Incident Responder to join a 24/7 SOC team in Bali, Indonesia. You will monitor, analyze, and respond to security events, perform threat hunting, and coordinate with clients for rapid remediation.

The role requires a diploma/degree in information security or related field and at least 1 year of networking experience. Strong analytical and communication skills are essential.

Qualifications

• Diploma/Degree in Information System/Information Security from a recognized institution.
• 1 year of working experience in networking environment.
• Basic, yet sound knowledge of network routing and switching fundamentals including Multiprotocol Label Switching (MPLS).
• Basic, yet sound technical understanding of operating systems, network architecture and design.
• Understanding of network, server and application fundamentals, and its protocols within the OSI layer framework.
• Basic, yet sound knowledge of encryption, key management and cryptology.
• Proven ability to plan and prioritize work, both their own and that of a project team.
• Able to work with participants at all levels in an organization and communicate effectively.

Responsibilities

• Act as Incident first responder for a 24/7 staffed SOC.
• Perform security monitoring, vulnerability management, data loss / policy violation prevention and threat hunting.
• Monitor security sensors and review logs to identify network anomalies or intrusions.
• Provide analysis from monitoring, research and assessment of security log data from many devices.
• Escalate security incidents using established policies in a timely manner.
• Liaise with customers on security intrusions, identify root cause and mitigation steps.
• Perform initial analysis of security events, network traffic, and logs.
• Assist with incident response plans, workflows, and SOPs.
• Collaborate with threat intelligence analysts to convert intelligence into detections.
• Monitor MDR platforms and perform analysis for notifications.
• Perform response actions on MDR platforms per standardized workflows.
• Act as liaison for configured alerts to monitor sensor performance.
• Fulfil Change Requests, Service Requests and respond to inquiries regarding Incident Management.

Skills

Incident response

Threat analysis

Network routing

OSI fundamentals

Encryption basics

Communication skills

Prioritization

MPLS knowledge

Education

Diploma/Degree in Information System/Information Security

Job description

Ensign is hiring !

L1

Responsibilities

• Act as Incident first responder for a 24/7 staffed SOC
• Perform security monitoring, vulnerability management, data loss / policy violation prevention and threat hunting
• Monitor security sensors and review logs to identifynetwork anomaliesor intrusions
• Provide analysisfrom monitoring, research and assessmentof security log data from a large number of heterogeneous security devices
• Escalate security incidents using established policies and proceduresin a timely manner
• Liaise with Ensign customers on security intrusions, identifying root cause and recommend mitigation step(s)/ remedial action(s)
• Perform initial analysis of security events, network traffic, and logs
• Assist with the development of incident response plans, workflows, and SOPs
• Work directly with threat intelligence analysts to convert intelligence into useful detection
• Monitoring the Managed Endpoint and Detection Response (MDR) platforms and performing analysis for notifications
• Performing Response action on Managed Endpoint and Detection Response (MDR) platforms based on standardize workflow and agreement with clients.
• Act as a liaison party for configured alerts to monitor performance of security sensors and tools
• Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management

Requirements

• Diploma/Degree in Information System/Information Security from a recognized institution
• 1 year of working experience in networking environment
• Basic, yet sound knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS)
• Basic, yet sound technical understanding of operating systems, network architecture and design
• Has understanding of network, server and application fundamentals, and its protocols within OSI layer framework
• Basic, yet sound knowledge of encryption, key management and cryptology
• Proven ability to plan and prioritize work, both their own and that of project team
• Sound understanding of organizational issues and challenges. Able to work effectively with participants at all levels in an organization
• Ability to analyze problems and determine root causes, generating alternatives, evaluating and selecting alternatives and implementing solutions
• Possess excellent writing skills and the ability to communicate to teammates as well as technical and executive level staff

Preferred Skills /Qualities

• Professional information technology/security certifications such as ITIL, CCNA and CEH will be preferred but related qualification (i.e. GCIA, CISSP etc.) will be an advantage

Other Special Working Conditions

• Able to perform 12-hour shift duties (2 days’ work with 2 off-days). Working hours: AM - 8:30am to 8:30pm; PM - 8:30pm to 8:30am. Shift patterns and duration may vary from time to time