SOC Analyst (Level 3)

Eternaindonesia; Jakarta Pusat; On-site; IDR 300,000,000 - 600,000,000; Full time

Benefits offered by this job

Private insurance coverage

Paid Time Off (PTO)

E-cash allowance for work expenses

Performance-based incentives

Sponsorship for advanced certifications

Onsite professional environment

Job summary

A cybersecurity firm in Jakarta Pusat is seeking a seasoned SOC Analyst Level 3 to lead advanced detection engineering and incident response for high-severity events. This onsite role emphasizes mentoring the SOC team and defining security posture while supporting international client initiatives. The ideal candidate has over 5 years of experience in security operations, strong SIEM expertise, and excellent communication skills. Competitive compensation and benefits included.

Qualifications

• 5+ years experience in Security Operations, Incident Response, or Digital Forensics.
• Deep expertise with SIEM and EDR/XDR solutions.
• Strong background in network and endpoint forensics.
• Skilled in scripting for automation and forensic data collection.
• Proven leadership and mentoring experience within a SOC.
• Excellent English communication for reporting and stakeholder engagement.

Responsibilities

• Lead complex incident response and post-incident remediation.
• Perform advanced threat hunting and forensic analysis.
• Design and tune advanced SIEM detection use-cases.
• Mentor and train L1/L2 analysts.
• Act as incident commander for high-severity events.
• Integrate threat intelligence into operational detection and response pipelines (IOC/BIOC operationalization).
• Drive SOC strategy: tooling selection, process improvement, purple-team exercises, and SOC maturity initiatives.
• Mentor and train L1/L2 analysts; lead incident post-mortems and remediation programs.
• Act as incident commander for high-severity events and communicate technical findings to stakeholders.

Skills

Security Operations

Incident Response

Digital Forensics

SIEM

EDR/XDR

Packet Analysis

Malware Analysis

Scripting

Leadership

Communication

Tools

Splunk

Elastic

Microsoft Sentinel

Cortex XSOAR

CrowdStrike

Python

PowerShell

Volatility

Job description

Explore our expertise across customer-facing, technical, and creative functions.

We power businesses across 8+ industries with tailored talent solutions.

Eterna Indonesia is recruiting a seasoned SOC Analyst Level 3 to lead advanced detection engineering, incident response for high-severity events, and SOC capability building. This senior, onsite position will serve as the technical escalation point, mentor the SOC team, and help define our security posture while supporting an international client initiative.

Key Responsibilities

• Lead complex incident response: containment, eradication, recovery, and post-incident remediation planning.
  
• Perform advanced threat hunting and deep forensic analysis across endpoints, network captures, and cloud evidence.
  
• Design, implement, and tune advanced SIEM detection use-cases, YARA rules, and correlation logic.
  
• Architect SOAR playbooks and automation to scale response and reduce mean time to detect/respond.
  
• Conduct malware analysis, memory forensics, and attribution where required.
  
• Integrate threat intelligence into operational detection and response pipelines (IOC/BIOC operationalization).
  
• Drive SOC strategy: tooling selection, process improvement, purple-team exercises, and SOC maturity initiatives.
  
• Mentor and train L1/L2 analysts; lead incident post-mortems and remediation programs.
  
• Act as incident commander for high-severity events and communicate technical findings to stakeholders.
  

Requirements (Must-have)

• 5+ years experience in Security Operations, Incident Response, or Digital Forensics.
  
• Deep, demonstrable expertise with SIEM (Splunk, Elastic, Sentinel, QRadar) and EDR/XDR solutions.
  
• Strong background in network and endpoint forensics, packet analysis (Wireshark, Zeek), and malware analysis workflows.
  
• Skilled in scripting for automation and forensic data collection (Python, PowerShell, Bash).
  
• Experience designing SOAR playbooks and mature detection engineering practices.
  
• Excellent English communication for reporting and stakeholder engagement.
  
• Proven leadership and mentoring experience within a SOC or incident response team.
  
• Willingness to work onsite in Jakarta Pusat and participate in on-call rotations.
  
• Availability to start within this week or next is preferred.
  

Preferred Qualifications

• Advanced certifications: GCFA, GCIH, GCIA, CISSP, OSCP, or equivalent.
  
• Experience operating within 24/7 SOC environments and supporting international clients.
  
• Familiarity with cloud-native detection strategies and cloud forensics (AWS/Azure/GCP).
  
• Experience with memory forensics, sandboxing, and advanced reverse engineering.
  

Tools & Technologies You May Use

Splunk / Elastic / Microsoft Sentinel, Cortex XSOAR / Demisto, CrowdStrike / SentinelOne / Carbon Black / Defender, Wireshark, Zeek, Volatility (memory forensics), sandbox tools, Python/PowerShell, Kibana, threat-intel platforms.

Benefits & Total Rewards

• Private insurance coverage including medical & dental.
  
• Paid Time Off (PTO) per company policy and Indonesian labor law.
  
• E-cash allowance redeemable for work equipment, certifications, or approved work expenses.
  
• Performance-based incentives and competitive senior-level compensation.
  
• Sponsorship for advanced certifications and training, plus leadership development.
  
• Onsite professional environment in Jakarta Pusat, working with international partners.
  
• Significant influence on SOC tooling, processes, and strategic direction.

Explore More Opportunities Waiting for You