Cyber Security Operations Center (CSOC) Analyst (English Speaker)

Location: Remote role associated with Jakarta, Indonesia

Company

hirify.global Group develops fintech and blockchain products across exchange, payments, infrastructure, custody, wallets, and blockchain integration, serving corporate clients worldwide.

What you will do

• Triage, analyze, enrich, and escalate alerts across SIEM, EDR/XDR, WAF, email security, and cloud log sources, coordinating with the MSSP.
• Own incidents from triage through resolution and post-incident improvement, producing playbooks and updated detection logic.
• Develop, tune, and validate SIEM detection rules using ES|QL, EQL, KQL, or equivalent query languages.
• Turn threat intelligence feeds and hunting queries into actionable response workflows and support insider threat monitoring, including identity and privileged-access anomaly detection.
• Verify that MSSP-maintained detection tooling and log pipelines are correctly onboarded and working, while tracking MTTD, MTTR, false-positive rates, and SLA adherence.
• Maintain operational documentation and contribute scripting or workflow automation to reduce repetitive triage and enrichment work.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• 3–4 years of experience in a SOC or equivalent security monitoring and detection engineering role.
• Hands-on SIEM experience covering detection use-case development and validation, ES|QL/EQL/KQL or equivalent query writing, alert triage, enrichment, ticket-based case management, and raw-log analysis.
• Working knowledge of Python or similar scripting for automation, log parsing, or modifying existing tooling.
• Knowledge of attack techniques, malware behavior, network security principles, and MITRE ATT&CK detection mapping.
• Familiarity with NIST or SANS incident response frameworks and experience writing playbooks or documentation from real incidents.
• Good understanding of AWS, Azure, or GCP security and comfort working across Windows, Linux, and macOS.
• English-speaking communication is required; collaboration with regional partners may require Chinese.

Nice to have

• Exposure to identity/IAM log analysis, insider threat monitoring, or UEBA concepts.
• Experience with Atomic Red Team or an equivalent adversary-emulation framework for detection validation.
• Chinese language proficiency in reading, writing, and/or speaking.
• Relevant certifications such as CISSP, GCIH, GCFA, CompTIA Security+, CySA+, CEH, or similar.
• Strong communication and documentation skills.

Culture & Benefits

• Full-time position in a lean, high-ownership security team.
• Collaboration with an MSSP, internal engineering team, and regional partners.
• Competitive total compensation package.
• Team-building programs and company events.