job description
Join Lexmark International as a Security Operations Center (SOC) Analyst, Level 2 and play a pivotal role in safeguarding our digital infrastructure. As a key defender of our information systems, you will monitor, analyze, and respond to cybersecurity threats in real-time, ensuring the integrity and confidentiality of our data. This role offers a dynamic environment where your expertise in threat detection and incident response will directly impact our global security posture.
Based in the vibrant and culturally rich island of Bali, this position provides an exceptional opportunity to advance your career in cybersecurity while enjoying a balanced lifestyle in one of the world's most sought-after destinations. If you are passionate about cybersecurity and thrive in a collaborative, fast-paced setting, we invite you to apply and become part of our dedicated SOC team.
Responsibility
- Monitor security alerts and events using SIEM tools (e.g., Splunk, IBM QRadar) to identify potential threats.
- Conduct in-depth analysis of security incidents, determining root causes and recommending remediation actions.
- Escalate high-severity incidents to senior analysts or management with clear, actionable insights.
- Develop and refine detection rules, correlation searches, and threat intelligence feeds to enhance SOC capabilities.
- Collaborate with cross-functional teams to implement security best practices and mitigate vulnerabilities.
- Document incident response procedures and contribute to post-incident reviews and reports.
- Stay updated on emerging cybersecurity threats, trends, and technologies to proactively strengthen defenses.
- Assist in the continuous improvement of SOC processes, tools, and workflows.
Qualifications
- Bachelor’s degree in Cybersecurity, Information Technology, or a related field.
- Minimum of 2-3 years of experience in a SOC or cybersecurity role, with hands-on experience in threat detection and incident response.
- Proficiency in SIEM tools (e.g., Splunk, IBM QRadar, ArcSight) and familiarity with EDR/XDR solutions.
- Strong understanding of network protocols, operating systems, and common attack vectors.
- Relevant certifications such as CISSP, CEH, CompTIA Security+, or GIAC are a plus.
- Excellent analytical and problem-solving skills with a keen attention to detail.
- Ability to work in shifts and respond to security incidents outside of standard business hours.
- Effective communication skills to articulate technical findings to both technical and non-technical stakeholders.