Security Analyst L2
Summary
SOC Level 2 security analyst in Jakarta who investigates escalated alerts, performs deep incident investigation (malware, phishing, intrusion), correlates logs to find root cause, tunes IBM QRadar SIEM rules, and executes initial response actions using tools like EDR, firewalls, and TheHive.
Job Description :
Analyze and investigate security alerts escalated from SOC L1.
Perform deep incident investigation (malware, phishing, intrusion, unauthorized access).
Correlate logs from SIEM, firewall, IDS/IPS, endpoints, and servers to identify root cause and impact.
Identify Indicators of Compromise (IOC) and support incident scoping.
Execute initial incident response actions such as isolation, blocking IPs, or disabling accounts.
Tune SIEM rules and reduce false positives.
Conduct threat hunting and support vulnerability analysis.
Create incident reports, RCA, and security documentation.
Use security tools such as SIEM, firewall, EDR, and ticketing systems (Jira, TheHive).
Qualifications
Bachelor’s degree in IT, Cybersecurity, Computer Science, or related fields.
Experience 2 to 4 years working in cybersecurity or IT security roles / at least 2 year as a SOC Level 1 Analyst or similar role.
Experience in SIEM: IBM QRADAR
Good understanding of security tools: SIEM, EDR, antivirus, firewalls, IDS/IPS, etc.
Able to analyze logs from networks, servers, and endpoints.
Know basic networking and how operating systems (Windows/Linux) work.
Understand common attack methods and frameworks like MITRE ATT&CK.
Have information security certification is a plus.