SOC Defense Analyst II: Incident Response & Threat Detection

Pengiklan Anonim; Jakarta Selatan; On-site; IDR 120,000,000 - 180,000,000; Full time

Job summary

Pengiklan Anonim in Jakarta seeks a security operations professional with a Bachelor’s degree in IT/CS or related fields and at least two years in SOC operations, cybersecurity, or incident response. You will work hands-on with SIEM, EDR, firewall, IDS/IPS, and log analysis, investigate incidents, and collaborate with IT teams to contain, mitigate, and recover from threats.

Expertise in MITRE ATT&CK, Windows, and Linux is preferred; certifications like SANS/GIAC, OSCP, CEH, CHFI, CISA, or CISSP

Qualifications

• Bachelor’s degree in IT or CS required.
• Minimum 2 years in SOC operations, cybersecurity, or incident response.
• Hands-on with SIEM, EDR, firewall, IDS/IPS, and log analysis.
• Strong incident investigation, threat detection, and incident response skills.
• Familiarity with MITRE ATT&CK, network security, Windows, and Linux.
• Relevant security certifications preferred.

Responsibilities

• Monitor, analyze, and investigate alerts escalated from SOC Layer 1.
• Perform incident triage, log analysis, threat hunting, and root cause analysis.
• Identify and investigate threats such as malware, phishing, suspicious access, and data exfiltration.
• Coordinate incident containment, mitigation, and recovery with relevant IT teams.
• Develop and improve SIEM detection rules, incident response playbooks, and security monitoring use cases.
• Prepare incident reports, document investigation findings, and escalate critical incidents to SOC Layer 3 when necessary.

Skills

SIEM

EDR

Firewall

IDS/IPS

Security log analysis

Incident investigation

Threat detection

Incident response

MITRE ATT&CK

Windows

Linux

Security certifications

Education

Bachelor's degree in IT/CS or related fields

Tools

SIEM platforms

EDR tools

Firewall technologies

IDS/IPS tools

Job description

Pengiklan Anonim in Jakarta seeks a security operations professional with a Bachelor’s degree in IT/CS or related fields and at least two years in SOC operations, cybersecurity, or incident response. You will work hands-on with SIEM, EDR, firewall, IDS/IPS, and log analysis, investigate incidents, and collaborate with IT teams to contain, mitigate, and recover from threats.

Expertise in MITRE ATT&CK, Windows, and Linux is preferred; certifications like SANS/GIAC, OSCP, CEH, CHFI, CISA, or CISSP