SOC ANALYST (SOC L1)

PT Graha Cyber Indonesia; Jakarta Selatan; On-site; IDR 180,000,000 - 300,000,000; Full time

Benefits offered by this job

Competitive salary and benefits

Collaborative environment

Career development opportunities

Work with enterprise clients

Job summary

PT Graha Cyber Indonesia is seeking a SOC Analyst (SOC L1) to monitor security alerts in real time within a 24/7 shift environment. You will perform initial triage, noise filtering, and severity classification per SOP, investigate incidents, and elevate as needed.

Proficiency in TCP/IP, DNS, HTTP/HTTPS, OS concepts, and scripting is required, with a focus on AI-assisted security analysis. Fresh graduates are welcome; English is the working language.

Qualifications

• Bachelor's degree in cybersecurity, computer science or related field.
• Strong understanding of TCP/IP, DNS, HTTP/HTTPS, OS concepts and common attack vectors.
• Basic scripting skills in Python or Bash.
• Experience using AI tools for security analysis and automation.
• Proven self-driven learning through labs, blogs, projects, or CTFs.
• English working language: read alerts, consoles, and docs.

Responsibilities

• Monitor security alerts in real time across platforms in a 24/7 shift.
• Perform initial alert triage, noise filtering, and severity classification per SOP.
• Investigate incidents and elevate according to severity and handling process.
• Use AI tools to aid alert analysis and automation.
• Maintain shift logs and incident documentation.

Skills

TCP/IP

DNS

HTTP/HTTPS

OS basics

Attack vectors

Python/Bash

AI tools

Self-learning

English fluency

24/7 shifts

Education

Bachelor's in cybersecurity

Bachelor's in computer science

Job description

PT Graha Cyber Indonesia (GCI) is a cybersecurity company delivering Security Assessments, Vulnerability Assessments, Penetration Testing, Red Team Exercises, Compliance Services, Security Consulting, and Managed Security Services (MSSP). We are looking for SOC Analyst (SOC L1), to monitor security alerts from a range of security platforms in real time within a 24/7 shift environment, performing initial alert triage, noise filtering, and severity classification per SOP.

Key responsibilities

Monitor security alerts from a range of security platforms in real time within a 24/7 shift environment

Perform initial alert triage, noise filtering, and severity classification per SOP

Investigate and elevate in line with the incident severity and handling process

Use AI tools to assist alert analysis, information retrieval, and scripting to improve efficiency

Maintain shift logs and incident documentation

About you

Bachelor's degree (S1) in cybersecurity, computer science, or a related field; outstanding fresh graduates are welcome to apply

Solid understanding of how TCP/IP, DNS, HTTP/HTTPS, operating systems, and common attack vectors work

Basic scripting ability in Python or Bash

Proficient in using AI tools (e.g., LLM assistants) for daily analysis and automation

Evidence of self-driven learning — at least one of: a personal home lab, CTF participation, a public technical blog / writeup, a personal GitHub project, a bug bounty profile, or hands-on AI-assisted security analysis / automation work

English as a working language, able to fluently read English alerts, consoles, and technical documentation

Willing to work 24/7 rotating shifts

Preferred

• CompTIA Security+, CSA (Certified SOC Analyst), or CEH
• Self-driven exploration or projects in AI + security (e.g., security automation, AI-assisted analysis)
• Awards in security competitions or public technical contributions

Why Join GCI?

• Competitive salary and benefits with comprehensive health, welfare, and employee benefits
• Professional, collaborative, and supportive working environment
• Career development and learning opportunities
• Opportunity to build and grow a fast-growing cybersecurity company
• Work with enterprise and regulated-industry clients
• Collaborate directly with experienced leadership