SOC L2 Analyst - Cybersecurity Technology Consulting

EY; Daerah Khusus Ibukota Jakarta; On-site; IDR 150,000,000 - 200,000,000; Full time

Job summary

A leading global consulting firm in Indonesia is looking for a Cybersecurity Analyst. This role involves assisting clients with monitoring and responding to security incidents, conducting research and analysis of threats, and mentoring junior staff. Candidates should have a Bachelor’s degree in Computer Science and preferably two years of experience in a Security Operations Center. This position offers the opportunity to enhance security capabilities and collaborate with cross-functional teams in a dynamic environment.

Qualifications

• Preferably 2+ years of experience in a Security Operations Center.
• Demonstrated ability to analyze, triage, and remediate security incidents.
• Experience in conducting investigations across multiple environments.

Responsibilities

• Assisting clients with monitoring and responding to security incidents.
• Conduct research and analysis of security alerts.
• Mentor and train junior analysts on best practices.

Skills

Incident analysis and response

SIEM tools knowledge (e.g., Splunk)

Knowledge of security technologies (Firewall, VPN)

Threat landscape awareness

Cyber Threat Intelligence skills

Education

Bachelor's degree in Computer Science or related field

Tools

SIEM tools (Splunk, Microsoft Sentinel)

Job description

Key Responsibilities

• Assisting clients with monitoring, investigation and response to security incidents.
• Effectively assess security incidents, determine their severity level, and manage response efforts with efficiency and precision.
• Conduct research, analysis, and investigation of security alerts
• Maintain a comprehensive awareness of the current threat landscape, including malware, phishing attacks, and advanced persistent threats (APTs).
• Actively participate in post-incident reviews to identify lessons learned and recommend improvements to processes and technologies.
• Provide feedback and recommendations to enhance detection and response capabilities
• Participate in continuous improvement of security operations processes and toolsets
• Provide guidance and leadership to the team during critical situations, ensuring effective decision-making and response.
• Foster collaboration with cross-functional teams to enhance the overall security posture of the organization.
• Mentor and train junior analysts, sharing knowledge and best practices to strengthen team capabilities.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field
• Preferably 2+ years of experience in a Security Operations Center (SOC) or related cybersecurity role
• Demonstrated ability to analyze, triage and remediate security incidents.
• Moderate knowledge in SIEM tools such as Splunk, Microsoft Sentinel or similar platforms, along with a solid understanding of various log sources and their functions.
• Moderate knowledge of security related technologies and their functions (Firewall, VPN, IDS/IPS, EDR, WAF, etc.)
• Experience in developing SOC use cases in SIEM to correlate diverse logs, including the creation of new monitoring use case logic and enabling effective investigation of security alerts and incidents.
• Experience in conducting investigations across various environments, including endpoints, networks, web applications, databases, and cloud resources
• Moderate knowledge of current threat landscape (threat actors, APT, cyber-crime, etc.)
• Knowledge of Cyber Threat Intelligence, including the analysis of intelligence alerts, threat hunting, and providing actionable recommendations.