Security Analyst
Security Analyst
pt itsec asia tbk- Posted 9 hours ago
- Be among the first 10 applicants
Job Description
Responsibilities
- Investigate escalated alerts from L1 and assess threat impact, scope, and root cause.
- Mentor & coach L1 in investigating & analyzing the security events with SIEM & XDR tools as needed.
- Provide timely incident response support in coordination with IT and business units.
- Perform threat intelligence analysis and correlate external IOCs/TTPs.
- Design and implement strategies to contain threats and to initiate recovery efforts in coordination with relevant teams.
- Review and refine detection rules, correlation logic, response playbooks, and incident response procedures to maintain relevance and effectiveness.
- Perform continuous threat hunting as a proactive activity against emerging cyber threats within the existing SIEM tools.
- Create and maintain SOP & response documentation.
- Maintain and update change management and incident tracking calendars.
- Maintain detailed hunt documentation, findings, and recommendations for remediation and prevention.
- Create and maintain detection content aligned with MITRE ATT&CK and other threat frameworks
- Graduates from D3, D4, or S1.
- 3-5 years of working experience as an L1 Security Analyst.
- In-depth understanding of network and endpoint security.
- Hands-on experience with SIEM (Splunk, Sentinel, QRadar, Elastic), XDR tools (e.g., Cortex, Ms Defender, TM-Vision1, CrowdStrike, SentinelOne).
- Knowledge of threat intelligence, IOCs, and MITRE ATT&CK framework.
- Understanding of the incident response lifecycle.
- Familiarity with vulnerability assessment methods.
- Intermediate analytical and investigative skills.
- Ability to correlate data from multiple sources.
- Clear documentation and reporting skills.
- Effective communication with technical and non-technical teams.
- Incident handling under pressure.
- Relevant certifications highly preferred (e.g., BTL1, CIHE, ECIH, CHFI, BTL2, eJPT, eWPT, CEH, eCTHP, CySA+, MS-200).
More Info
Key Skills
incident response lifecycle
XDR tools
MITRE ATT&CK framework
Elastic
vulnerability assessment methods
Ms Defender
IOCs
SentinelOne
TM-Vision1
About Company
Skills:
Unix, Endpoint Security, cloud security, PowerShell, Bash, Networking, Ips, Windows, Firewalls, Iso 27001, Linux, Ids, Siem, Python, vulnerability scanners, nist
Skills:
Siem Tools, cloud security, Chfi, Certified CIHE, security monitoring platforms, eCTHP, Cissp, SOC 2 Type 2 Implementer, ECIH, Red Hat OpenShift
Skills:
Dlp, CSPM, Gcp, Idp, Siem, Azure, AWS, AI tools, ZTNA, SWG, SOAR, CIS, MITRE, EDR, MDM, nist
Skills:
threat management , Dashboards, Ceh, Ecsa, Chfi, Incident Management, Siem, Documentation, Response, Security device management, Preparation of reports, ECIH
Skills:
Incident Response, Siem Tools, Log Analysis, CND Certified Network Defender, CEH Certified Ethical Hacker, CompTIA Security+, security incident handling, network security threat detection