Security Analyst L2: Incident Response & SIEM Expert

PT Visionet Data Internasional; Jakarta Pusat; On-site; IDR 133,920,000 - 200,880,000; Full time

Job summary

PT Visionet Data Internasional is seeking a Security Operations Center (SOC) Analyst to analyze and investigate security alerts escalated from L1. The role focuses on malware, phishing, intrusion, and unauthorized access, with kin to correlate logs from SIEM, firewalls, IDS/IPS, endpoints, and servers.

You will identify IOCs, support incident scoping, perform initial containment actions, tune SIEM rules, and contribute to threat hunting and vulnerability analysis.

Qualifications

• Bachelor's degree in IT, Cybersecurity, Computer Science, or related fields.
• Experience 2 to 4 years in cybersecurity or IT security roles; at least 2 years as SOC L1 Analyst.
• Experience in SIEM: IBM QRadar.
• Good understanding of security tools: SIEM, EDR, antivirus, firewalls, IDS/IPS.
• Able to analyze logs from networks, servers, and endpoints.
• Know basic networking and how Windows/Linux operate.
• Understand MITRE ATT&CK.
• Information security certification is a plus.

Responsibilities

• Analyze and investigate security alerts escalated from SOC L1.
• Perform deep incident investigation (malware, phishing, intrusion, unauthorized access).
• Correlate logs from SIEM, firewall, IDS/IPS, endpoints, and servers to identify root cause and impact.
• Identify Indicators of Compromise (IOC) and support incident scoping.
• Execute initial incident response actions such as isolation, blocking IPs, or disabling accounts.
• Tune SIEM rules and reduce false positives.
• Conduct threat hunting and support vulnerability analysis.
• Create incident reports, RCA, and security documentation.

Skills

2-4 years cybersecurity experience

SOC Level 1 experience

MITRE ATT&CK knowledge

Network and OS basics

Education

Bachelor’s degree in IT/Cybersecurity/CS

Tools

IBM QRadar

EDR tools

Firewalls

Jira

TheHive

Job description

PT Visionet Data Internasional is seeking a Security Operations Center (SOC) Analyst to analyze and investigate security alerts escalated from L1. The role focuses on malware, phishing, intrusion, and unauthorized access, with kin to correlate logs from SIEM, firewalls, IDS/IPS, endpoints, and servers.

You will identify IOCs, support incident scoping, perform initial containment actions, tune SIEM rules, and contribute to threat hunting and vulnerability analysis.