Security Analyst L1
Ensign InfoSecurity · Indonesia
Sekilas tentang pekerjaan ini
Ensign InfoSecurity membuka posisi Security Analyst L1 di Indonesia untuk mendukung operasi SOC 24/7. Peran ini mencakup pemantauan keamanan, analisis insiden, dan koordinasi respons terhadap ancaman.
Tugas utama
- Menjadi penanggap pertama insiden di SOC yang beroperasi 24/7.
- Memantau keamanan, mengelola kerentanan, dan melakukan threat hunting.
- Menganalisis log, lalu lintas jaringan, serta peristiwa keamanan.
- Mengeskalasi insiden dan berkoordinasi dengan pelanggan terkait mitigasi.
- Memantau platform MDR dan menjalankan tindakan respons sesuai alur kerja.
Kualifikasi utama
- Diploma atau gelar Information System/Information Security dari institusi yang diakui.
- Pengalaman kerja satu tahun di lingkungan networking.
- Memahami dasar routing, switching, MPLS, sistem operasi, dan arsitektur jaringan.
- Memahami dasar enkripsi, manajemen kunci, dan kriptologi.
- Bersedia bekerja dalam shift 12 jam; sertifikasi ITIL, CCNA, atau CEH diutamakan.
Ringkasan ini dibuat dengan AI dari deskripsi di bawah. Yang berlaku adalah deskripsi lengkapnya di situs Ensign InfoSecurity.
Deskripsi pekerjaan
Ensign is hiring !
L1
Responsibilities
- Act as Incident first responder for a 24/7 staffed SOC
- Perform security monitoring, vulnerability management, data loss / policy violation prevention and threat hunting
- Monitor security sensors and review logs to identify network anomalies or intrusions
- Provide analysis from monitoring, research and assessment of security log data from a large number of heterogeneous security devices
- Escalate security incidents using established policies and procedures in a timely manner
- Liaise with Ensign customers on security intrusions, identifying root cause and recommend mitigation step(s)/ remedial action(s)
- Perform initial analysis of security events, network traffic, and logs
- Assist with the development of incident response plans, workflows, and SOPs
- Work directly with threat intelligence analysts to convert intelligence into useful detection
- Monitoring the Managed Endpoint and Detection Response (MDR) platforms and performing analysis for notifications
- Performing Response action on Managed Endpoint and Detection Response (MDR) platforms based on standardize workflow and agreement with clients.
- Act as a liaison party for configured alerts to monitor performance of security sensors and tools
- Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management
Requirements
- Diploma/Degree in Information System/Information Security from a recognized institution
- 1 year of working experience in networking environment
- Basic, yet sound knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS)
- Basic, yet sound technical understanding of operating systems, network architecture and design
- Has understanding of network, server and application fundamentals, and its protocols within OSI layer framework
- Basic, yet sound knowledge of encryption, key management and cryptology
- Proven ability to plan and prioritize work, both their own and that of project team
- Sound understanding of organizational issues and challenges. Able to work effectively with participants at all levels in an organization
- Ability to analyze problems and determine root causes, generating alternatives, evaluating and selecting alternatives and implementing solutions
- Possess excellent writing skills and the ability to communicate to teammates as well as technical and executive level staff
Preferred Skills /Qualities
- Professional information technology/security certifications such as ITIL, CCNA and CEH will be preferred but related qualification (i.e. GCIA, CISSP etc.) will be an advantage
Other Special Working Conditions
- Able to perform 12-hour shift duties (2 days’ work with 2 off-days). Working hours: AM - 8:30am to 8:30pm; PM - 8:30pm to 8:30am. Shift patterns and duration may vary from time to time
Lowongan ini diambil dari situs karier resmi Ensign InfoSecurity. Lokr tidak memproses lamaran: kamu melamar langsung di situs perusahaan, dan info terbaru tentang lowongan ini ada di sana.