Security Operations Engineer (L2) – 24/7

Pengiklan Anonim; Tangerang Selatan; On-site; IDR 240,000,000 - 360,000,000; Full time

Job summary

PT Artajasa Pembayaran Elektronis in BSD, Tangerang Selatan, Indonesia seeks a Security Operations Engineer (L2) to join a 24/7 SOC. You will monitor, triage, and investigate security alerts, using SIEM/EDR/WAF to protect critical payment infrastructure.

The role requires strong incident response, threat hunting, and knowledge of MITRE ATT&CK, with shifts rotating across a 24/7 schedule. Ideal candidates have 2–4 years in security operations, solid networking knowledge, and hands-on SIEM

Qualifications

• Bachelor's degree in Computer Science, IT, Cybersecurity, or a related field.
• 2–4 years of experience in Security Operations, SOC, or IT Security, preferably with L1 SOC experience.
• Strong networking fundamentals including TCP/IP, DNS, HTTP, and routing.
• Hands-on experience with SIEM platforms such as Splunk, QRadar, LogRhythm, or Elastic/ELK.
• Familiarity with EDR/XDR solutions such as CrowdStrike, Defender, or SentinelOne.
• Understanding of MITRE ATT&CK and common attack techniques.
• Experience with WAF solutions such as F5 or Cloudflare.
• Willing to work on 24/7 rotating shift schedule.

Responsibilities

• Monitor, investigate, and analyze security alerts escalated from L1 SOC.
• Perform alert triage, log analysis, and event correlation to identify threats.
• Conduct end-to-end incident investigations and identify indicators of compromise.
• Operate and analyze security monitoring tools including SIEM, EDR/XDR, and WAF.
• Analyze attack patterns using the MITRE ATT&CK framework.
• Investigate suspicious activity across network, Windows, and Linux systems.
• Support incident response, containment, and remediation activities.
• Utilize threat intelligence and basic malware analysis to assess threats.
• Document incidents and escalation reports; recommend monitoring and process improvements.

Skills

Threat analysis

Incident response

Log analysis

MITRE ATT&CK

Python scripting

SIEM operations

WAF concepts

Education

Bachelor's degree in Computer Science/Information Technology/Cybersecurity

Tools

Splunk

IBM QRadar

LogRhythm

Elastic/ELK

CrowdStrike

Microsoft Defender

SentinelOne

F5/Cloudflare WAF

Job description

Security Operations Engineer (L2) – 24/7

Placement:
The selected candidate will be placed at PT Artajasa Pembayaran Elektronis, based in BSD, Tangerang Selatan.

About Artajasa:

PT Artajasa Pembayaran Elektronis (ATM Bersama) is one of Indonesia's leading payment infrastructure providers, delivering secure, reliable, and high-availability transaction services for banks and financial institutions. As a key enabler of the national payment ecosystem, Artajasa operates mission-critical platforms that support interbank connectivity, fund transfers, switching, clearing, and settlement services across Indonesia. Through continuous innovation and technology advancement, Artajasa is committed to building scalable and resilient payment solutions that support the future of digital finance.

About the Role:

Responsible for handling escalated security alerts, conducting in-depth investigations, and responding to cybersecurity incidents within a 24/7 Security Operations Center (SOC). The role requires strong technical capabilities in security monitoring, threat analysis, and incident investigation to protect Artajasa's critical infrastructure and payment services.

Key Responsibilities:

• Monitor, investigate, and analyze security alerts escalated from L1 SOC.
• Perform alert triage, log analysis, and event correlation to identify potential security threats.
• Conduct end-to-end incident investigations and identify indicators of compromise (IOCs).
• Operate and analyze security monitoring tools, including SIEM, EDR/XDR, and WAF.
• Analyze attack patterns and techniques using the MITRE ATT&CK framework.
• Investigate suspicious activities across network, Windows, and Linux environments.
• Support incident response, containment, and remediation activities.
• Utilize threat intelligence and basic malware analysis to assess potential threats.
• Document security incidents, investigation findings, and escalation reports.
• Recommend improvements to security monitoring, detection rules, and incident response processes.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, Information Systems, Cybersecurity, or a related field.
• Minimum 2–4 years of experience in Security Operations, SOC, or IT Security, preferably with L1 SOC experience.
• Strong understanding of networking fundamentals, including TCP/IP, DNS, HTTP, and routing.
• Good knowledge of Windows and Linux operating systems, including log and event analysis.
• Hands-on experience with SIEM platforms such as Splunk, IBM QRadar, LogRhythm, or Elastic/ELK.
• Familiarity with EDR/XDR solutions such as CrowdStrike, Microsoft Defender, or SentinelOne.
• Understanding of the MITRE ATT&CK framework and common attack techniques.
• Experience with WAF solutions such as F5 or Cloudflare.
• Strong skills in security alert triage, log analysis, event correlation, and incident investigation.
• Basic knowledge of malware analysis and threat intelligence.
• Python or other scripting skills for analysis automation are an advantage.
• Relevant certifications such as CompTIA Security+, CySA+, GCIH, GCIA, BTL1/BTL2, or vendor-specific SIEM/EDR certifications are preferred.
• Experience in banking, financial services, fintech, or payment service provider environments is an advantage.
• Willing to work on 24/7 rotating shift schedule.