Stanley S

SOC Analyst with over 5 years of hands-on experience in Security Operations and Incident Response. Currently serving as a Shift Leader, responsible for supervising analyst investigations, managing shift handovers, and streamlining investigation processes for improved efficiency. Expertise in availability monitoring tools, External Attack Surface Management (EASM), security assessment.

Proficient in SOAR automation, Python scripting, SIEM use case development, Threat Intelligence detection and threat hunting workflows.

Senior Cybersecurity Analyst at Bank Central Asia (2024 Oct – Present)

• Managed Threat Intelligence Platform, fine-tune hunting rules, managing asset list (domain, IP, brands, social media, BIN) to minimize false-positive assets and findings.
• Coordinated SOC maturity assessment requirements with key personnel gathering information and completing technical documentation, and improve the weakness.
• Review, design and enhance security Standard Operating Procedures (SOP) and Work Instruction documents (IK).
• Conducted reviews of SOAR playbooks and automation scripts developed by other analysts to ensure quality and operational efficiency.
• Currently enhancing credential leaks findings workflow and procedure.
• Continue to lead shift as a shift leader.
• Continue to lead the operational and enhancement of Availability Monitoring.
• Continue to lead the operational and enhancement of External Attack Surface (EASM).

Cybersecurity Analyst at Bank Central Asia (2021 June – 2024 Sept)

• Led the implementation and operational of Availability Monitoring for Security Systems & Infrastructure, including system topology design, configuration, and escalation procedures.
• Developed python-based automation script to create an Alert Notification Gateway system, enabling real-time alerts to be sent to messaging platforms (Webex, Telegram, and Teams).
• Performed security assessment for subsidiaries and internal company systems, identifying weakness and make an improvement recommendation.
• Developed and enhanced python-based automation script and SOAR playbooks to reduce fatigue and improve efficiency.
• Developed use-case, fine-tune alerts, created dashboards from SIEM to optimize threat detection and response.
• Led the deployment and operation of External Attack Surface Management (EASM) tools, focusing on external risk reduction and improve security posture.
• Design security Standard Operating Procedures (SOP) and Work Instruction documents (IK) for Availability Monitoring System, External Attack Surface Management (EASM), Data Risk Analytics (DRA), etc.
• Coordinated cyber insurance requirements with key personnel gathering necessary information to complete technical documentation.
• Conducted capacity planning and generated reports to assess performance, scalability, and resource needs of owned systems.
• Led a shift as a shift leader, supervising analyst investigations, documenting ongoing task (incident, alerts, issues) for shift handovers, and improve investigation process efficiency.

Software Engineer Intern at Bank Mandiri (2020 Feb – 2020 Aug)

• Developed a CRUD (Create, Read, Update, Delete) web application for internal staff management using Java Spring Boot.

Bachelor's Degree in Information Technology – Binus University (2017 Sep – 2021 Feb)