Security Operations Center Analyst

Key Responsibilities

• Monitor and analyze security alerts and events using IBM QRadar SIEM to identify potential security threats and suspicious activities.
• Investigate, validate, and perform in-depth analysis of security incidents, including correlation of logs, network traffic, and endpoint activities.
• Perform incident response and remediation coordination in accordance with established security procedures and incident response frameworks.
• Develop, maintain, and optimize security playbooks and automated workflows using Security Orchestration, Automation, and Response (SOAR) platforms.
• Perform SIEM rule tuning, correlation rule optimization, and use case enhancement to improve threat detection accuracy and reduce false-positive alerts.
• Analyze security logs and incident patterns to identify detection gaps and recommend improvements to monitoring and response capabilities.
• Collaborate with SOC L1, Security Engineers, and IT teams to support incident escalation, investigation, containment, and resolution.
• Conduct threat hunting and proactive security analysis to identify potential threats that may not be detected by existing security rules.
• Maintain detailed documentation of security incidents, investigation findings, response actions, and detection rule changes.
• Continuously improve SOC processes, detection logic, and incident response automation based on emerging threats and operational requirements.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent practical experience.
• Proven experience in cybersecurity operations, preferably in a Security Operations Center (SOC) environment at Level 2 or equivalent.
• Hands-on experience with IBM QRadar SIEM, including alert investigation, log analysis, correlation rules, and rule tuning.
• Practical experience with SOAR platforms, including playbook development, workflow automation, and incident response orchestration.
• Understanding of security incident investigation, threat detection, incident response, and escalation procedures.
• Knowledge of network protocols, operating systems, security logs, and common attack techniques.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to document technical findings clearly and collaborate effectively with cross-functional teams.
• Willing to work Shifting, and onsite in Central Jakarta