Security Analyst

Responsibilities

- Investigate escalated alerts from L1 and assess threat impact, scope, and root cause. - Mentor & coach L1 in investigating & analyzing the security events with SIEM & XDR tools as needed. - Provide timely incident response support in coordination with IT and business units. - Perform threat intelligence analysis and correlate external IOCs/TTPs. - Design and implement strategies to contain threats and to initiate recovery efforts in coordination with relevant teams. - Review and refine detection rules, correlation logic, response playbooks, and incident response procedures to maintain relevance and effectiveness. - Perform continuous threat hunting as a proactive activity against emerging cyber threats within the existing SIEM tools. - Create and maintain SOP & response documentation. - Maintain and update change management and incident tracking calendars. - Maintain detailed hunt documentation, findings, and recommendations for remediation and prevention. - Create and maintain detection content aligned with MITRE ATT&CK and other threat frameworks

Requirements

- Graduates from D3, D4, or S1. - 3-5 years of working experience as an L1 Security Analyst. - In-depth understanding of network and endpoint security. - Hands-on experience with SIEM (Splunk, Sentinel, QRadar, Elastic), XDR tools (e.g., Cortex, Ms Defender, TM-Vision1, CrowdStrike, SentinelOne). - Knowledge of threat intelligence, IOCs, and MITRE ATT&CK framework. - Understanding of the incident response lifecycle. - Familiarity with vulnerability assessment methods. - Intermediate analytical and investigative skills. - Ability to correlate data from multiple sources. - Clear documentation and reporting skills. - Effective communication with technical and non-technical teams. - Incident handling under pressure. - Relevant certifications highly preferred (e.g., BTL1, CIHE, ECIH, CHFI, BTL2, eJPT, eWPT, CEH, eCTHP, CySA+, MS-200).

About PT ITSEC Asia Tbk

ITSEC is one of the leading cybersecurity companies in the APAC region, listed on the Indonesian Stock Exchange (IDX), with over 300 employees across five countries. We deliver end-to-end cybersecurity services and solutions, including Consulting Services, Security Solutions Integration, and Managed Security Services. ITSEC provides continuous IT infrastructure protection against multiplying cybersecurity threats and ensures compliance with increasingly demanding data protection and critical infrastructure regulations. Our expertise has been built over a decade of delivering thousands of high-quality cybersecurity projects, providing cutting-edge solutions in collaboration with world-class technology partners across financial, telecommunications, energy, transportation, manufacturing, and other critical industry sectors. We also have extensive experience in helping our customers with fraud prevention, Operational Technology (OT), and Industrial IoT (IIoT) security.