SOC Analyst L1 (Triage Analyst)

Sagara Technology; Kota Bandung; On-site; IDR 60,000,000 - 120,000,000; Full time

Job summary

SAGARA Technology is hiring an entry-level SOC Analyst L1 (Triage Analyst) to monitor security alerts, perform initial validation, and escalate incidents. You will work with Google SecOps, SIEM, and EDR to collect evidence and support containment actions.

This role suits fresh graduates or professionals with 1–2 years in cybersecurity, and requires strong communication in Indonesian and English. Based in Bandung, you will join a 24/7 rotating shift environment, contribute to daily shift reports,

Qualifications

• Fresh graduate or up to 1–2 years in cybersecurity or related roles.
• Basic understanding of SIEM, security monitoring, alert triage, and incident response.
• Familiarity with at least one SIEM platform (Google SecOps/Chronicle, Splunk, QRadar, Elastic SIEM, or Sentinel).
• Working knowledge of TCP/IP, DNS, HTTP/HTTPS, and OSI layers.
• Good communication and documentation in Bahasa Indonesia and English.
• Willingness to work in a 24/7 rotating shift, including nights and weekends.

Responsibilities

• Monitor SIEM, EDR, and Email Gateway alerts in real time.
• Run SOC SOPs and basic incident response playbooks (e.g., isolating an endpoint when malware is detected).
• Gather initial context (IP address, file hash, username, hostname).
• Create clear incident tickets and escalate to L2 / SOC Lead with supporting evidence.
• Keep up with common attack techniques, IoCs, and emerging threats.
• Write daily shift reports and investigation notes.

Skills

Analytical thinking

Attention to detail

Basic cybersecurity knowledge

Indonesian-English bilingual

Tools

Google Chronicle

Splunk

IBM QRadar

Elastic SIEM

Microsoft Sentinel

Job description

The SOC Analyst L1 (Triage Analyst) is an entry-level position within the Security Operations Center (SOC), responsible for serving as the first line of defense in identifying and responding to potential cybersecurity threats. This role focuses on monitoring security alerts through SIEM, EDR, and Email Gateway platforms, primarily using Google Security Operations (Google SecOps). The analyst performs initial alert validation, investigates suspicious activities, collects relevant evidence, and escalates confirmed or potential security incidents to L2 analysts or the SOC Lead. This position requires basic cybersecurity knowledge, analytical thinking, attention to detail, and the ability to work in a 24/7 rotating shift environment.

Responsibilities

• Monitor SIEM, EDR, and Email Gateway alerts in real time
• Run SOC SOPs and basic incident response playbooks (e.g., isolating an endpoint when malware is detected)
• Gather initial context (IP address, file hash, username, hostname)
• Create clear incident tickets and escalate to L2 / SOC Lead with supporting evidence
• Keep up with common attack techniques, IoCs, and emerging threats
• Write daily shift reports and investigation notes

Requirements

• Fresh graduate or up to 1–2 years of experience in cybersecurity, SOC, IT operations, or a related role
• Basic understanding of SIEM, security monitoring, alert triage, and incident response.
• Familiarity with at least one SIEM platform, preferably Google SecOps (Chronicle), Splunk, IBM QRadar, Elastic SIEM, or Microsoft Sentinel.
• Working knowledge of networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, and OSI layers.
• Understanding of Windows Event Logs and Linux Syslog.
• Basic knowledge of common cybersecurity threats, including phishing, malware, brute-force attacks, and suspicious login activities.
• Ability to analyze security logs, identify suspicious activities, and distinguish true positives from false positives.
• Good communication and documentation skills in both Bahasa Indonesia and English.
• Willingness to work in a 24/7 rotating shift schedule, including nights and weekends.

Skills

About SAGARA Technology

SAGARA Technology

Building digital products that move Indonesia forward.

SAGARA Technology is a digital product studio and software house delivering enterprise software, mobile apps, and AI-driven platforms for clients across Southeast Asia. We ship measurable outcomes with small, senior, cross-functional squads.