Security Operation Center Analyst L3

PT Punggawa Siber Solusi; Kemayoran; On-site; IDR 180,000,000 - 320,000,000; Full time

Job summary

PT Punggawa Siber Solusi is seeking a seasoned Security Operations professional to lead investigations of complex cyber threats and coordinate advanced incident response activities. You will mentor junior analysts, drive malware analysis efforts, and improve SOC playbooks and detection logic.

The role requires strong experience with SIEM platforms, threat hunting, and digital forensics, with on-site work in Jakarta and surrounding areas. Shift-based access is sometimes required.

Qualifications

• Minimum 5 years in SOC, IR, Digital Forensics, Threat Intelligence, or cyber security operations.
• One or more certifications such as CHFI, GCFA, GCFE, CCFP, CTIA, GCTI, FOR578 or equivalent.
• Strong knowledge of incident investigation, threat hunting, and malware analysis.
• Experience with MITRE ATT&CK, Cyber Kill Chain, and IOC/IOA analysis is preferred.
• Ability to work in shift, on-site, and project-based assignments.

Responsibilities

• Lead investigation and analysis of complex security incidents and cyber threats.
• Perform advanced threat hunting, threat intelligence analysis, and digital forensic investigations.
• Identify attack patterns, determine root cause, and provide remediation recommendations.
• Support malware analysis and coordinate incident response activities.
• Develop and improve SOC detection use cases, playbooks, and response procedures.
• Provide technical guidance and mentoring to SOC Level 1 and Level 2 analysts.
• Collaborate with internal teams and customers during major security incidents.
• Prepare detailed technical reports, post-incident analysis, and continuous improvement recommendations.
• Ensure compliance with SOC operational procedures, security standards, and SLAs.

Skills

SOC Operations

Incident Response

Digital Forensics

Threat Hunting

Threat Intelligence

Malware Analysis

SIEM

Network Security

MITRE ATT&CK

NIST IR

IOC/IOA Analysis

Education

CHFI / GIAC Certifications

GCFA / GCFE

CCFP / CTIA / GCTI / FOR578

Tools

SIEM Platforms

Job description

• Lead investigation and analysis of complex security incidents and cyber threats.
• Perform advanced threat hunting, threat intelligence analysis, and digital forensic investigations.
• Identify attack patterns, determine root cause, and provide remediation recommendations.
• Support malware analysis and coordinate incident response activities.
• Develop and improve SOC detection use cases, playbooks, and response procedures.
• Provide technical guidance and mentoring to SOC Level 1 and Level 2 analysts.
• Collaborate with internal teams and customers during major security incidents.
• Prepare detailed technical reports, post-incident analysis, and continuous improvement recommendations.
• Ensure compliance with SOC operational procedures, security standards, and service level agreements (SLAs).

Job Description

• Lead investigation and analysis of complex security incidents and cyber threats.
• Perform advanced threat hunting, threat intelligence analysis, and digital forensic investigations.
• Identify attack patterns, determine root cause, and provide remediation recommendations.
• Support malware analysis and coordinate incident response activities.
• Develop and improve SOC detection use cases, playbooks, and response procedures.
• Provide technical guidance and mentoring to SOC Level 1 and Level 2 analysts.
• Collaborate with internal teams and customers during major security incidents.
• Prepare detailed technical reports, post-incident analysis, and continuous improvement recommendations.
• Ensure compliance with SOC operational procedures, security standards, and service level agreements (SLAs).

Minimum Qualifications

• Minimum 5 years of experience in Security Operations Center (SOC), Incident Response, Digital Forensics, Threat Intelligence, or Cyber Security Operations.
• Holds one or more of the following certifications (or equivalent):CHFI (Computer Hacking Forensic Investigator) or equivalent:
  GCFA (GIAC Certified Forensic Analyst)
  GCFE (GIAC Certified Forensic Examiner)
  CCFP (ISC²)
  CTIA (Certified Threat Intelligence Analyst) or equivalent:
  GCTI (GIAC Cyber Threat Intelligence)
  FOR578 (SANS Threat Intelligence)
• Strong knowledge of:
• Advanced Security Monitoring & SIEM Platforms
• Incident Investigation and Digital Forensics
• Threat Intelligence and Threat Hunting
• Malware Analysis and Advanced Incident Response
• Network Security fundamentals (TCP/IP, Firewall, IDS/IPS, VPN)
• Familiar with security frameworks such as MITRE ATT&CK, Cyber Kill Chain, NIST Incident Response, and IOC/IOA analysis.
• Experience handling complex cyber security incidents and leading technical investigations.
• Able to work in shift, on-site, and project-based assignments.
• Strong analytical, problem-solving, communication, and mentoring skills.