Deskripsi Pekerjaan:

• Have min 3-year experience in Cyber Security or at least 1-year of working as a L2 SOC.
• Responsible for working in a 24x7.
• Have min certification Splunk Power User, ECSA and ECIH or equivalent.
• Have depth knowledge of Security and Network.
• Have depth knowledge and concept cyber-attacks and techniques, threat vector,
• risk, and incident management.
• Have good knowledge of various operating system like Windows, Linux, Unix etc.
• Have good knowledge about various SIEM Splunk and Security Perimeter Device and Tools.
• Have good Documentation and Reporting Incident.
• Have experience Threat Hunting.
• Have experience Regular Expression (Regex).
• Have experience create Splunk Dashboard, Use Case and Policy related with alert/issue/vulnerability and other security issue.
• Have experience create knowledge base/Playbook/Guideline for investigation process and every SOC process activity.
• Can performed evaluation false positive alert/issue/vulnerability.
• Have good knowledge for develop and improve processes for monitoring and incident.

Kualifikasi:

• Have min 3-year experience in Cyber Security or at least 1-year of working as a L2 SOC.
• Responsible for working in a 24x7.
• Have min certification Splunk Power User, ECSA and ECIH or equivalent.
• Have depth knowledge of Security and Network.
• Have depth knowledge and concept cyber-attacks and techniques, threat vector,
• risk, and incident management.
• Have good knowledge of various operating system like Windows, Linux, Unix etc.
• Have good knowledge about various SIEM Splunk and Security Perimeter Device and Tools.
• Have good Documentation and Reporting Incident.
• Have experience Threat Hunting.
• Have experience Regular Expression (Regex).
• Have experience create Splunk Dashboard, Use Case and Policy related with alert/issue/vulnerability and other security issue.
• Have experience create knowledge base/Playbook/Guideline for investigation process and every SOC process activity.
• Can performed evaluation false positive alert/issue/vulnerability.
• Have good knowledge for develop and improve processes for monitoring and incident.