SOC Analyst L2

Pengiklan Anonim; Jakarta Selatan; Sur place; IDR 120 000 000 - 180 000 000; Plein temps

Résumé du poste

Pengiklan Anonim in Jakarta seeks a security operations professional with a Bachelor’s degree in IT/CS or related fields and at least two years in SOC operations, cybersecurity, or incident response. You will work hands-on with SIEM, EDR, firewall, IDS/IPS, and log analysis, investigate incidents, and collaborate with IT teams to contain, mitigate, and recover from threats.

Expertise in MITRE ATT&CK, Windows, and Linux is preferred; certifications like SANS/GIAC, OSCP, CEH, CHFI, CISA, or CISSP

Qualifications

• Bachelor’s degree in IT or CS required.
• Minimum 2 years in SOC operations, cybersecurity, or incident response.
• Hands-on with SIEM, EDR, firewall, IDS/IPS, and log analysis.
• Strong incident investigation, threat detection, and incident response skills.
• Familiarity with MITRE ATT&CK, network security, Windows, and Linux.
• Relevant security certifications preferred.

Responsabilités

• Monitor, analyze, and investigate alerts escalated from SOC Layer 1.
• Perform incident triage, log analysis, threat hunting, and root cause analysis.
• Identify and investigate threats such as malware, phishing, suspicious access, and data exfiltration.
• Coordinate incident containment, mitigation, and recovery with relevant IT teams.
• Develop and improve SIEM detection rules, incident response playbooks, and security monitoring use cases.
• Prepare incident reports, document investigation findings, and escalate critical incidents to SOC Layer 3 when necessary.

Connaissances

SIEM

EDR

Firewall

IDS/IPS

Security log analysis

Incident investigation

Threat detection

Incident response

MITRE ATT&CK

Windows

Linux

Security certifications

Formation

Bachelor's degree in IT/CS or related fields

Outils

SIEM platforms

EDR tools

Firewall technologies

IDS/IPS tools

Description du poste

Minimum Bachelor’s Degree (S1) in Information Technology, Computer Science, or related fields.

Minimum 2 years of experience in SOC operations, cybersecurity, or incident response.

Hands-on experience with SIEM, EDR, firewall, IDS/IPS, and security log analysis.

Strong understanding of incident investigation, threat detection, and incident response.

Familiarity with MITRE ATT&CK Framework, network security, Windows, and Linux.

Relevant certifications such as SANS/GIAC, OSCP, CEH, CHFI, CISA, and/or CISSP are preferred.

Responsibilities

Monitor, analyze, and investigate security alerts escalated from SOC Layer 1.

Perform incident triage, log analysis, threat hunting, and root cause analysis.

Identify and investigate security threats such as malware, phishing, suspicious access, and data exfiltration.

Coordinate incident containment, mitigation, and recovery with relevant IT teams.

Develop and improve SIEM detection rules, incident response playbooks, and security monitoring use cases.

Prepare incident reports, document investigation findings, and escalated critical incidents to SOC Layer 3 when necessary.