Security Operation Engineer 24/7

Sagara Technology; Jakarta Pusat; On-site; IDR 133,920,000 - 223,200,000; Full time

Job summary

Sagara Technology seeks a Mid-Senior SOC Analyst L2 to join our Jakarta-based Security Operations Center. You will provide second-line analysis and incident response within a 24/7 monitoring environment, investigating alerts, logs, and IoCs, while mapping tactics using MITRE ATT&CK.

You will work with SIEM/EDR platforms, analyze network traffic, and support threat detection and mitigation with cross-platform expertise in Windows, Linux, and network devices.

Qualifications

• 2–4 years of experience in SOC/IT security roles (L1 equivalent considered)
• Bachelor’s degree in Informatics, Information Systems, Cybersecurity, or related field
• Strong understanding of TCP/IP, DNS, HTTP, and routing
• Hands-on experience with SIEM platforms (Splunk/QRadar/LogRhythm/ELK)
• Familiarity with EDR/XDR solutions (CrowdStrike/Defender/SentinelOne)
• Knowledge of MITRE ATT&CK and its use in incident analysis
• Experience with WAF platforms (F5/Cloudflare) and incident response

Responsibilities

• Investigate security alerts escalated by L1 analysts to identify threats and incidents
• Perform incident triage, determine severity, and assess impact on systems and networks
• Analyze security logs and events across Windows, Linux, and network devices
• Operate and monitor SIEM platforms to correlate and investigate events
• Use EDR/XDR solutions to investigate endpoint threats and IoCs
• Apply MITRE ATT&CK to map TTPs and guide analyses
• Examine network traffic and events involving TCP/IP, DNS, HTTP, and routing
• Monitor and investigate web threats via WAF platforms
• Support incident response activities and mitigation recommendations
• Maintain continuous security monitoring in a 24/7 SOC environment

Skills

SOC operations

Incident handling

Log analysis

SIEM & EDR/XDR

MITRE ATT&CK

Education

Bachelor's degree in Informatics/Information Systems/Cybersecurity

Tools

Splunk

IBM QRadar

LogRhythm

Elastic/ELK Stack

CrowdStrike

Microsoft Defender

SentinelOne

F5 WAF

Cloudflare WAF

Job description

Jakarta, Indonesia Full-time Mid-Senior level

About the role

The SOC Analyst L2 plays a critical role in Security Operations Center (SOC) operations, providing second-level analysis and incident response support within a 24/7 security monitoring environment. This role involves investigating security alerts, analyzing network traffic and system logs, operating SIEM and EDR/XDR platforms, and identifying indicators of compromise (IoCs). The SOC Analyst L2 is also responsible for assessing attack techniques using the MITRE ATT&CK framework, performing incident triage, and supporting effective threat detection and mitigation.

Responsibilities

• Investigate and analyze security alerts escalated by L1 analysts to identify potential threats and security incidents.
• Perform incident triage, determine incident severity, and assess the potential impact on systems and networks.
• Analyze security logs and events across Windows, Linux, network devices, and other security infrastructure.
• Operate and monitor SIEM platforms to identify, correlate, and investigate suspicious activities and security events.
• Utilize EDR/XDR solutions to investigate endpoint-related threats and identify potential indicators of compromise (IoCs).
• Apply the MITRE ATT&CK framework to identify, analyze, and map adversary tactics, techniques, and procedures (TTPs).
• Analyze network traffic and investigate security events involving TCP/IP, DNS, HTTP, routing, and other network protocols.
• Monitor and investigate web-based threats through Web Application Firewall (WAF) platforms.
• Support incident response activities, including threat identification, investigation, escalation, and mitigation recommendations.
• Perform continuous security monitoring and ensure effective incident handling within a 24/7 SOC operational environment.

Requirements

• Minimum 2–4 years of experience in Security Operations Center (SOC), Security Operations, or IT Security roles, preferably with prior experience as an L1 SOC Analyst or equivalent.
• Bachelor's degree in Informatics, Information Systems, Cybersecurity, or a related field. Equivalent professional experience may also be considered.
• Strong understanding of network fundamentals, including TCP/IP, DNS, HTTP, and routing.
• Strong knowledge of Windows and Linux operating systems, particularly system logs and event analysis.
• Hands-on experience operating SIEM platforms such as Splunk, IBM QRadar, LogRhythm, or Elastic/ELK Stack.
• Familiarity with EDR/XDR solutions such as CrowdStrike, Microsoft Defender, or SentinelOne.
• Good understanding of the MITRE ATT&CK framework and its application in security incident analysis.
• Strong incident investigation and analysis skills, including log analysis, event correlation, and identification of Indicators of Compromise (IoCs).
• Hands-on experience operating Web Application Firewall (WAF) solutions such as F5 or Cloudflare.
• Ability to perform security alert triage and incident handling effectively.
• Willingness to work in a 24/7 operational environment with a rotational shift schedule.

About SAGARA Technology

SAGARA Technology

Building digital products that move Indonesia forward.

SAGARA Technology is a digital product studio and software house delivering enterprise software, mobile apps, and AI-driven platforms for clients across Southeast Asia. We ship measurable outcomes with small, senior, cross-functional squads.