SOC Analyst, 00:00–09:00 UTC

This is a fully remote position, open to applicants in Indonesia.

📋 Description

• Continuously oversee, evaluate, and analyze security alerts and events from SIEM, EDR, SSE, and WAF platforms.

• Conduct thorough investigations of security incidents from initiation through triage, analysis, containment, eradication, and post-incident documentation.

• Assess the scope, severity, and impact of security events.

• Differentiate between true positives and false positives, escalating confirmed incidents as necessary.

• Implement response actions, including isolating endpoints, blocking indicators, disabling compromised accounts, and enforcing access limitations.

• Conduct structured shift handovers across regions within the follow-the-sun SOC model.

• Engage in proactive threat hunting across endpoint, network, and log data utilizing frameworks like MITRE ATT&CK.

• Provide insights on detection quality and refine SIEM correlation rules, EDR custom detections, and WAF rules.

• Enhance investigations with threat intelligence, indicators of compromise, attacker techniques, and emerging campaigns.

• Create and maintain technical documentation, standard operating procedures, and incident response playbooks.

• Collaborate with IT, infrastructure, application, and security engineering teams.

• Assist in vulnerability management and the ongoing enhancement of the organization's security posture.

• Report directly to the SOC Lead.

⛳️ Requirements

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field, or equivalent practical experience.

• Minimum of 3 years of hands-on experience as a SOC Analyst, managing alerts and investigating security incidents in a production environment.

• Strong working knowledge of EDR, SSE, SIEM, and WAF technologies.

• Experience in incident response and threat hunting activities.

• Familiarity with the MITRE ATT&CK framework.

• Understanding of network security, endpoint security, cloud security, and Zero Trust principles.

• Excellent analytical, troubleshooting, and problem-solving capabilities.

• Exceptional attention to detail.

• Ability to manage sensitive information in a responsible and secure manner.

• Proficient written and verbal communication skills in English.

• Capacity to collaborate effectively with both technical and non-technical teams across various time zones.

• Relevant certifications such as Security+, CySA+, GCIA, GCIH, BTL1, or vendor-specific credentials are advantageous.

• Practical experience in implementing, configuring, and tuning security platforms, or developing and refining detection content, is a significant plus.

🏝️ Benefits

• Fully remote work environment.

• Opportunity to work with a global team.

• Engage in a rapidly growing fintech and digital finance company.

• Exposure to blockchain, stablecoins, digital asset tokenization, Bitcoin mining, AI, and peer-to-peer technology.

• Chance to contribute to innovative security operations and digital finance products.