SOC L1 Analyst

PT Duta Firza; Jakarta Utara; On-site; IDR 72,000,000 - 120,000,000; Full time

Job summary

PT Duta Firza is seeking an enthusiastic SOC L1 Analyst to join our Security Operations Center. You will monitor security alerts, triage incidents, and perform initial analysis to support rapid containment and response.

We welcome fresh graduates or up to two years in IT, with basic Windows and Linux skills, familiarity with SIEM/EDR, and a mindset to learn MITRE ATT&CK at a practical level. Shift work, including nights and weekends, is expected.

Qualifications

• Bachelor's degree in Computer Science, IT, Cybersecurity, or related field.
• 0–2 years of IT ops, network admin, or cybersecurity experience; fresh graduates welcome.
• Basic knowledge of Windows, Linux, and command-line interfaces.
• Familiarity with SIEM, EDR, and firewall concepts.
• Understanding of MITRE ATT&CK framework (basic level).
• Cybersecurity certifications: CEH/ECIH or CySA+/Security+/CASP+.
• Willingness to work 24/7 rotating shifts including nights, weekends, and public holidays.

Responsibilities

• Continuous security monitoring of SIEM, EDR, IDS/IPS, firewalls, and email security dashboards.
• Triage and initial analysis of security alerts to assess severity and validity.
• Execute documented initial response actions per SOPs (endpoint isolation, IP/URL blocking, credential resets).
• Documentation and ticket management in Jira/ServiceNow with accurate context.
• Escalate complex or high-risk incidents to L2 within SLA with relevant findings.

Skills

Analytical thinking

Strong communication

Willingness to rotate shifts

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Tools

SIEM

EDR

Firewalls

Windows

Linux

Job description

We're looking for an eager, detail-oriented individual to join our SOC team — whether you're a fresh graduate ready to kickstart your cybersecurity career or someone with up to two years of IT experience looking to specialize in security operations.

As an SOC L1 Analyst, you will serve as the first line of defense in our Security Operations Center — continuously monitoring, triaging, and performing initial analysis of security alerts. You'll filter out false positives, execute standard incident response procedures, and elevate complex threats to the L2 team, helping maintain a strong baseline security posture for our clients.

Key responsibilities

Continuous security monitoring: Monitor SIEM, EDR, IDS/IPS, firewalls, and email security dashboards in real-time during shifts.

Triage and initial analysis: Assess incoming security alerts to determine severity and validity, distinguishing false positives from true threats.

Playbook execution: Execute documented initial response actions per SOPs — including endpoint isolation, IP/URL blocking, and credential resets.

Documentation and ticket management: Record all findings, analysis steps, and actions in the ticketing system (Jira, ServiceNow) accurately and promptly.

Incident escalation: Escalate complex or high-risk incidents to the L2 team within SLA, with all relevant context and initial findings.

Requirements:

S1 (Bachelor's) in Computer Science, IT, Cybersecurity, or related field

0–2 years experience in IT ops, network admin, or cybersecurity; fresh graduates welcome

Basic knowledge of Windows, Linux, and command-line interfaces

Familiarity with SIEM, EDR, and firewall concepts

Understanding of MITRE ATT&CK framework (basic level)

Cybersecurity certification (either of the following):

EC-Council: CEH (Certified Ethical Hacker)/ECIH (EC-Council Certified Incident Handler)

CompTIA: CySA+ (Cybersecurity Analyst)/Security+/CASP+

Willingness to work 24/7 rotating shifts including nights, weekends, and public holidays

Strong written and verbal communication skills

Additional requirements (good but not compulsory):

Prior hands-on experience with monitoring tools, log analysis, or basic incident response

Established in 1979 as a trading partner for the Indonesian oil and gas sector, we have spent over four decades evolving into a multi-disciplinary energy services provider. Beyond being a specialist in process control and instrumentation, we offer full-scale EPC services, ensuring we meet the needs of Indonesia’s energy infrastructure with precision.

Our strategy is rooted in long‑term sustainability. Recognizing the shift in the global landscape, we broadened our horizons to include ICT. By bridging the gap between traditional energy infrastructure and the digital economy, we are uniquely positioned to serve the evolving industrial and digital needs of the future.

Established in 1979 as a trading partner for the Indonesian oil and gas sector, we have spent over four decades evolving into a multi-disciplinary energy services provider. Beyond being a specialist in process control and instrumentation, we offer full-scale EPC services, ensuring we meet the needs of Indonesia’s energy infrastructure with precision.

Our strategy is rooted in long‑term sustainability. Recognizing the shift in the global landscape, we broadened our horizons to include ICT. By bridging the gap between traditional energy infrastructure and the digital economy, we are uniquely positioned to serve the evolving industrial and digital needs of the future.