SOC L2 Analyst - Incident Response & Threat Hunting

Luminare Consulting; Daerah Khusus Ibukota Jakarta; On-site; IDR 671,704,450 - 1,007,556,675; Full time

Job summary

An IT Consulting firm in Jakarta is looking for an IT Security Operation Center (SOC) - L2. This role requires a minimum of 2 years of experience in cybersecurity with skills in incident management and response, threat analysis, and familiarity with various security tools. The candidate will work in a 24x7 SOC environment, investigating security incidents and communicating findings with stakeholders to enhance overall cybersecurity posture.

Qualifications

• Minimum 2 years of experience in Cyber security/SOC.
• Proficient in incident management and response.
• Knowledge of various operating systems, including Windows and Linux.

Responsibilities

• Perform in-depth investigations of security incidents.
• Monitor and respond to security alerts in real-time.
• Maintain detailed documentation of security incidents and responses.

Skills

Incident Management and Response

Threat Analysis

Communication

Cybersecurity Trends Knowledge

Tools

SIEM Tools

Packet Analysis Tools

ServiceNow

Job description

IT Security Operation Center (SOC) - L2 (IT Consulting)

Job Openings IT Security Operation Center (SOC) - L2 (IT Consulting)

About the job IT Security Operation Center (SOC) - L2 (IT Consulting)

We are assisting one of our clients, an IT Consulting company and they are currently looking for IT Security Operation Center (SOC) - L2.

Job Descriptions:

1. Incident Response and Investigation:

• Perform in-depth investigations of security incidents, analysing security alerts, and developing incident reports.
• Analyse security events from various sources, including SIEM (Security Information and Event Management) tools, intrusiondetection systems, firewalls, and antivirus software.

2. Threat Detection and Analysis:

• Identify and classify security threats based on their severity and potential impact on the organization.
• Monitor and respond to real-time security alerts, escalating incidents to higher-level analysts or management as necessary.

3.Security Tool Management:

• Manage and fine-tune security monitoring tools to enhance detection capabilities.
• Assist in creating and updating playbooks for incident response and threat hunting.

4.Collaboration and Communication:

• Work with cross-functional teams, including IT, development, and compliance, to ensure a cohesive approach to security.
• Communicate findings, risks, and recommendations to stakeholders clearly and effectively.

5.Documentation and Reporting:

• Maintain detailed documentation of security incidents, responses, and the overall security posture of the organization.
• Contribute to regular security reports and metrics for management reviews.
• Stay updated on the latest cybersecurity trends, threats, and best practices.
• Participate in training and professional development opportunities to enhance skill sets and knowledge.

Requirements:

1. Minimum 2 years of experience in Cyber security/SOC
2. Proficient in Incident Management and Response
3. In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors,risk management, incident management etc.
4. Responsible for working in a 24x7 Security Operation Centre (SOC) environment.
5. Provide analysis and trending of security log data from a large number of heterogeneoussecurity devices
6. Analyze and respond to previously undisclosed software and hardware vulnerabilities
7. Investigate, document, and report on information security issues and emerging trends
8. Integrate and share information with other analysts and other teams.
9. Knowledge of various operating system flavors including but not limited to Windows, Linux, Unix.
10. Have experience operation SIEM Dashboard, Use Case and Policy related with alert / issue/ vulnerability andother security issue.
11. Have experience create knowledge base/Playbook/Guideline for investigation process and every SOCprocess activity.
12. Communicate effectively Customer Existing
13. Knowledge about various tools like SIEM, Packet Analysis, HIPS/NIPS, Service NowTicketing Toolset Web Security, AV, UBEA, Advanced SOC