Responsibility

• Perform daily monitoring on information security events, incidents, and vulnerabilities in Security Operation Center.
• Perform first level incident response, vulnerability analysis and assist remediation process to customers.
• Develop custom report based on data from multiple sources (E.g: SIEM, IPS, Firewall).
• Report information security events, incidents, and vulnerabilities to information security manager and operation manager.
• Improvement of detection abilities of security monitoring system by reducing false positive/negative.
• Update knowledge base of information security events, incidents, vulnerabilities & its remediation method.
• Work closely with security engineers when network security perimeters (eg: IPS and Firewall) doesn’t send its log to SIEM.
• Help information security manager to oversee effectiveness of security policies and procedures.
• Work closely with security consultant to implement new Security Operation Center.

Qualifications

• Graduate from reputable university majoring in Information Technology or Computer Science with min GPA 3.00 out of 4.00.
• Having excellent knowledge with OSI layer and TCP/IP network.
• Having good knowledge with networking concept (E.g: subneting, VLAN, switching, routing, and redundancy).
• Hands-on experience in Windows and Linux platform administration.
• Having good knowledge with information or network security standard (Either ISO27001 or NIST standard).
• Hands-on experience to perform intrusion analysis and incident handling.
• Hands-on experience to perform security monitoring with Security Information and Event Management (SIEM).
• Hands-on experience to extract various log from security devices (e.g: Firewall, IPS) and consolidate it in SIEM.
• Hands-on experience with either PERL, PYTHON, or BASH scripting language.
• Having certification in security field is preferable (Either GCIA or GCIH).
• Passionate to learn, hardworking, good team player, and willing to work in daily 24/7 shift.