SOC L2 Analyst - Cybersecurity Technology Consulting

Ernst & Young Advisory Services Sdn Bhd; Daerah Khusus Ibukota Jakarta; On-site; IDR 180,000,000 - 240,000,000; Full time

Job summary

A global consulting firm is seeking a SOC L2 Analyst for its Cybersecurity Technology Consulting team in Jakarta. This role involves assisting clients with incident monitoring and response, conducting thorough investigations, and mentoring junior analysts. Candidates should have a Bachelor's degree in Computer Science and at least 2 years of experience in a related cybersecurity role. Familiarity with SIEM tools and knowledge of security technologies are essential. This position offers opportunities for professional growth and collaboration in a dynamic environment.

Qualifications

• 2+ years of experience in a Security Operations Center (SOC) or cybersecurity role.
• Ability to analyze, triage and respond to security incidents.
• Familiarity with the current threat landscape.
• Moderate knowledge in SIEM tools such as Splunk, Microsoft Sentinel or similar platforms, along with a solid understanding of various log sources and their functions.
• Moderate knowledge of security related technologies and their functions (Firewall, VPN, IDS/IPS, EDR, WAF, etc.)
• Experience in developing SOC use cases in SIEM to correlate diverse logs, including the creation of new monitoring use case logic and enabling effective investigation of security alerts and incidents.
• Experience in conducting investigations across various environments, including endpoints, networks, web applications, databases, and cloud resources
• Moderate knowledge of current threat landscape (threat actors, APT, cyber-crime, etc.)
• Knowledge of Cyber Threat Intelligence, including the analysis of intelligence alerts, threat hunting, and providing actionable recommendations.

Responsibilities

• Assist clients with monitoring and responding to security incidents.
• Conduct research and analysis of security alerts.
• Participate in post-incident reviews to recommend improvements.
• Maintain awareness of current threat landscape, including malware, phishing attacks, and APTs.
• Participate in post-incident reviews to identify lessons learned and recommend improvements to processes and technologies.
• Provide feedback and recommendations to enhance detection and response capabilities
• Participate in continuous improvement of security operations processes and toolsets
• Provide guidance and leadership to the team during critical situations, ensuring effective decision-making and response.
• Foster collaboration with cross-functional teams to enhance the overall security posture of the organization.
• Mentor and train junior analysts, sharing knowledge and best practices to strengthen team capabilities.

Skills

Incident investigation

Threat analysis

Security operations

Mentoring and training

Collaboration skills

Education

Bachelor's degree in Computer Science or related field

Tools

SIEM tools (e.g., Splunk, Microsoft Sentinel)

Firewall, VPN, IDS/IPS

EDR

WAF

Job description

SOC L2 Analyst - Cybersecurity Technology Consulting

Location: Jakarta

Other locations: Anywhere in Country

Requisition ID: 1669436

Key Responsibilities:

• Assisting clients with monitoring, investigation and response to security incidents.
• Effectively assess security incidents, determine their severity level, and manage response efforts with efficiency and precision.
• Conduct research, analysis, and investigation of security alerts
• Maintain a comprehensive awareness of the current threat landscape, including malware, phishing attacks, and advanced persistent threats (APTs).
• Actively participate in post-incident reviews to identify lessons learned and recommend improvements to processes and technologies.
• Provide feedback and recommendations to enhance detection and response capabilities
• Participate in continuous improvement of security operations processes and toolsets
• Provide guidance and leadership to the team during critical situations, ensuring effective decision-making and response.
• Foster collaboration with cross-functional teams to enhance the overall security posture of the organization.
• Mentor and train junior analysts, sharing knowledge and best practices to strengthen team capabilities.

Requirements:

• Bachelor's degree in Computer Science, Information Technology, or a related field
• Preferably 2+ years of experience in a Security Operations Center (SOC) or related cybersecurity role
• Demonstrated ability to analyze, triage and remediate security incidents.
• Moderate knowledge in SIEM tools such as Splunk, Microsoft Sentinel or similar platforms, along with a solid understanding of various log sources and their functions.
• Moderate knowledge of security related technologies and their functions (Firewall, VPN, IDS/IPS, EDR, WAF, etc.)
• Experience in developing SOC use cases in SIEM to correlate diverse logs, including the creation of new monitoring use case logic and enabling effective investigation of security alerts and incidents.
• Experience in conducting investigations across various environments, including endpoints, networks, web applications, databases, and cloud resources
• Moderate knowledge of current threat landscape (threat actors, APT, cyber-crime, etc.)
• Knowledge of Cyber Threat Intelligence, including the analysis of intelligence alerts, threat hunting, and providing actionable recommendations.