SOC Analyst - Cybersecurity Technology Consulting

Ernst & Young Advisory Services Sdn Bhd; Daerah Khusus Ibukota Jakarta; On-site; IDR 666.777.000 - 1.000.167.000; Full time

Job summary

A global consulting firm seeks a SOC Analyst in Jakarta to assist clients with cybersecurity incidents, manage response efforts, and mentor junior analysts. The ideal candidate will have a Bachelor's degree in Computer Science, at least 2 years of relevant experience, and familiarity with SIEM tools. Responsibilities include assessing security incidents, conducting investigations, and collaborating with cross-functional teams to enhance security operations. This role offers an opportunity to play a crucial part in the threat landscape management.

Qualifications

• 2+ years in a Security Operations Center (SOC) or cybersecurity role.
• Ability to analyze security incidents and respond effectively.
• Knowledge of Cyber Threat Intelligence and threat landscape.

Responsibilities

• Assist clients with monitoring and investigating security incidents.
• Assess security incidents and manage response efforts.
• Provide guidance during critical situations and mentor juniors.

Skills

Incident analysis

Threat detection

Mentoring

Collaboration

Education

Bachelor's degree in Computer Science or related field

Tools

SIEM tools such as Splunk or Microsoft Sentinel

Security technologies (Firewall, VPN, IDS/IPS)

Job description

SOC Analyst - Cybersecurity Technology Consulting

Location: Jakarta

Other locations: Anywhere in Country

Requisition ID: 1669436

Key Responsibilities

• Assisting clients with monitoring, investigation and response to security incidents.
• Effectively assess security incidents, determine their severity level, and manage response efforts with efficiency and precision.
• Conduct research, analysis, and investigation of security alerts.
• Maintain a comprehensive awareness of the current threat landscape, including malware, phishing attacks, and advanced persistent threats (APTs).
• Actively participate in post-incident reviews to identify lessons learned and recommend improvements to processes and technologies.
• Provide feedback and recommendations to enhance detection and response capabilities.
• Participate in continuous improvement of security operations processes and toolsets.
• Provide guidance and leadership to the team during critical situations, ensuring effective decision-making and response.
• Foster collaboration with cross-functional teams to enhance the overall security posture of the organization.
• Mentor and train junior analysts, sharing knowledge and best practices to strengthen team capabilities.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Preferably 2+ years of experience in a Security Operations Center (SOC) or related cybersecurity role.
• Demonstrated ability to analyze, triage, and remediate security incidents.
• Moderate knowledge in SIEM tools such as Splunk, Microsoft Sentinel, or similar platforms, along with a solid understanding of various log sources and their functions.
• Moderate knowledge of security related technologies and their functions (Firewall, VPN, IDS/IPS, EDR, WAF, etc.).
• Experience in developing SOC use cases in SIEM to correlate diverse logs, including the creation of new monitoring use case logic and enabling effective investigation of security alerts and incidents.
• Experience in conducting investigations across various environments, including endpoints, networks, web applications, databases, and cloud resources.
• Moderate knowledge of current threat landscape (threat actors, APT, cyber-crime, etc.).
• Knowledge of Cyber Threat Intelligence, including the analysis of intelligence alerts, threat hunting, and providing actionable recommendations.