SOC L1 Analyst - Cybersecurity Technology Consulting
EY Global Services · Jakarta, ID, 12190
Sekilas tentang pekerjaan ini
SOC L1 Analyst di EY Global Services bertugas memantau dan merespons peringatan serta insiden keamanan, sekaligus mendukung investigasi dan perbaikan SOC. Posisi ini berlokasi di Jakarta dan ditujukan bagi kandidat lulusan S1 bidang terkait dengan IPK minimal 3,20 yang bersedia bekerja shift di pusat operasi 24/7.
Tugas utama
- Memantau dan merespons alarm, peringatan, serta insiden keamanan melalui SIEM, EDR, dan NDR.
- Menganalisis, menyelidiki, melaporkan, dan mengoordinasikan penanganan aktivitas keamanan.
- Menaikkan kasus kompleks kepada analis senior atau tim respons insiden.
- Mendokumentasikan analisis peringatan, proses investigasi, dan langkah penyelesaian.
- Memenuhi target layanan dan standar kualitas serta berkontribusi pada perbaikan SOC.
Kualifikasi utama
- S1 Ilmu Komputer, Teknologi Informasi, atau bidang terkait; IPK minimal 3,20.
- Pengetahuan tentang Splunk, Sentinel, Crowdstrike, Microsoft Defender, atau ServiceNow.
- Pengetahuan tentang pemantauan keamanan dan respons insiden siber.
- Memahami Cyber Kill Chain, MITRE Attack, vektor ancaman umum, dan konsep keamanan.
- Berpengalaman menggunakan Windows, Linux, UNIX, atau sistem operasi utama lainnya; bersedia bekerja shift 24/7.
Ringkasan ini dibuat dengan AI dari deskripsi di bawah. Yang berlaku adalah deskripsi lengkapnya di situs EY Global Services.
Deskripsi pekerjaan
Key Responsibilities: Monitor and respond to security alarms\alerts\incidents in Security tools such as SIEM, EDR and NDR Provide strategic analysis, investigating, reporting, remediation, coordinating and tracking of security-related activities to Senior Security Analysts, SOC Engineering, and/or customers. Escalate complex investigation and work with higher-level analysts or incident response teams.
Document security alert analysis, steps taken to investigate, and resolution steps performed. Deliver services according to service targets (SLA’s) and quality standards Contribute to SOC continuous improvement program Communicate effectively with customers, teammates, and management. Skills and attributes for success: Good knowledge of utilizing security tools such as: Splunk, Sentinel, Crowdstrike, Microsoft Defender, ServiceNow, etc.
Good knowledge in Security Monitoring and Cyber Incident Response. Knowledge on Cyber Kill Chain Process and MITRE Attack Understanding common threat vectors (malware, email, and website analysis at a basic level). Knowledge of general security concepts and methods To qualify for the role, you must have Bachelor's degree in Computer Science, Information Technology, or a related field with minimum GPA of 3.20.
Experience with Windows, Linux, UNIX, any other major operating systems. Demonstrate technical and security practices to problem solving. Demonstrate in-depth technical capabilities and professional knowledge. Willingness to work in a 24/7 operations center (shift work required).