SIEM (Security Information and Event Management) Administrator
TechConnect.id · Jakarta, Indonesia
Sekilas tentang pekerjaan ini
TechConnect.id mencari SIEM (Security Information and Event Management) Administrator di Jakarta, Indonesia. Posisi ini bertanggung jawab mengelola Google SecOps SIEM dan mendukung deteksi serta respons insiden keamanan bersama tim SOC.
Tugas utama
- Mengelola, mengonfigurasi, dan memantau Google SecOps SIEM
- Memelihara infrastruktur SIEM dan SOC, termasuk pembaruan dan patch
- Mengintegrasikan serta menganalisis log dan data keamanan
- Mengotomatisasi proses keamanan menggunakan scripting
- Berkolaborasi dengan tim SOC untuk deteksi dan respons insiden
Kualifikasi utama
- Memahami operasi SIEM, analisis log, dan korelasi peristiwa keamanan
- Berpengalaman menggunakan Google Cloud Security dan SIEM berbasis cloud
- Mahir menggunakan Python, Powershell, atau Bash untuk otomasi
- Memahami keamanan jaringan, firewall, IDS/IPS, dan threat intelligence
- Sertifikasi Google Cloud Security atau setara lebih disukai
Ringkasan ini dibuat dengan AI dari deskripsi di bawah. Yang berlaku adalah deskripsi lengkapnya di situs TechConnect.id.
Deskripsi pekerjaan
- Administer and manage Google SecOps SIEM, including configuration, tuning, monitoring, and data source integration
- Deploy, optimize, and maintain SIEM & SOC Infrastructure. Ensure accurate log collection, correlation, alerting, and system health through regular updates, patch management, and best practices
- Integrate and analyze security data, centralize monitoring, correlate logs from various sources, and conduct security incident analysis for threat detection and remediation
- Automate security processes using scripting to improve efficiency and response times
- Collaborate with SOC teams to ensure effective incident detection and response
Requirements
- Strong knowledge of SIEM operations, log analysis, and security event correlation
- Experience with Google Cloud Security tools and cloud-based SIEM solutions
- Proficiency in scripting languages (Python, Powershell, Bash) for automation
- Understanding of network security, firewalls, IDS/IPS, and threat intelligence
- Certification (preferred): Google Cloud Security Certification or equivalent