Belajar Security Analyst - Roadmap, Karir & Refleksi Akhir

#Pendahuluan

Selamat datang di episode terakhir Belajar Security Analyst! Dari episode 0 hingga 27, kita telah menempuh perjalanan lengkap dari prasyarat dasar hingga AI-native SOC. Episode ini adalah refleksi, rekap, dan peta jalan ke depan. Kalian sudah memiliki fondasi yang kuat — sekarang saatnya membangun karir di atas fondasi itu.

#Rekap Perjalanan 28 Episode

#FASE 1: Pre-Requisites & Fundamentals (Ep 0-2)

Episode	Topik	Poin Utama
0	Pre-Requisites & Setup	Skill dasar, lab SIEM, verifikasi environment
1	Peran, SOC & Karir	Tanggung jawab, tier model, tren 2026
2	Model SOC & Operations	SOC types, shift ops, procedures

#FASE 2: Basic Operational & Core Concepts (Ep 3-11)

Episode	Topik	Poin Utama
3	Logging & Telemetry	Windows/Linux logs, normalization pipeline
4	SIEM Fundamentals	Wazuh/Splunk/Elastic, query, dashboards
5	Detection Engineering Dasar	Sigma rules, correlation, ATT&CK mapping
6	Network Analysis	IDS/IPS (Snort/Suricata), Wireshark, Zeek
7	Endpoint Security (EDR/XDR)	EDR/XDR, telemetry, hunting on endpoint
8	Threat Hunting	Hypothesis-driven, IOC vs baseline
9	Malware Analysis Dasar	Triage, sandbox, static/dynamic analysis
10	Email & Phishing Analysis	Header analysis, URL/attachment analysis
11	Cloud Security Monitoring	CloudTrail, GuardDuty, misconfiguration

#FASE 3: Workloads & Configuration (Ep 12-17)

Episode	Topik	Poin Utama
12	Incident Response Process	SANS 6 phases, scenario practice
13	Playbooks & Runbooks	Triage playbook, SOAR integration
14	Triage & Alert Prioritization	False pos/neg, severity, queue management
15	Forensics Dasar & Evidence	Chain of custody, imaging, procedures
16	Vulnerability Management	Scanning, CVSS, patching coordination
17	Threat Intelligence	OSINT, IOCs/IOAs, MISP

#FASE 4: Networking & Security (Ep 18-20)

Episode	Topik	Poin Utama
18	MITRE ATT&CK Mapping	Framework, Navigator, coverage mapping
19	Identity & Access Monitoring	AD/Azure AD, MFA, identity attacks
20	Compliance & Reporting	NIST/ISO/SOC2, metrics, reporting

#FASE 5: Advanced Topics (Ep 21-25)

Episode	Topik	Poin Utama
21	Automation & SOAR	TheHive, Shuffle, playbook automation
22	AI & ML dalam Detection	Supervised/unsupervised, UBA, anomalies
23	LLM & AI Security Operations	AI copilot, LLM analysis, prompt security
24	Hunting Advanced & Baselining	KQL, YARA, data science, baselining
25	Detection Engineering Advanced	Tuning, validation, purple team

#FASE 6: Modern Ecosystem & Readiness (Ep 26-27)

Episode	Topik	Poin Utama
26	Ekosistem & Tren 2026	AI-native SOC, XDR, cloud-native
27	Roadmap & Refleksi	Career path, certifications, this episode

#Roadmap Karir

#Jalur Karir SOC Analyst

100%

#Timeline Karir

Level	Pengalaman	Skill Focus
L1 Analyst	0-2 tahun	Monitoring, triage, basic investigation
L2 Analyst	2-4 tahun	Deep investigation, correlation, tuning
L3 Hunter	4-6 tahun	Threat hunting, advanced analysis
Detection Engineer	4-7 tahun	Rule writing, purple team, automation
Security Engineer	5-8 tahun	Architecture, tool selection, mentoring
Security Architect	8+ tahun	Strategy, design, leadership

#Sertifikasi yang Direkomendasikan

Level	Sertifikasi	Focus
Entry	CompTIA Security+	Fundamental
Mid	CompTIA CySA+	Security analytics
Mid	BTL1 (Blue Team Level 1)	SOC operations
Senior	GIAC GSOC	SOC management
Senior	CISSP	Security breadth

Tip

Jangan terburu-buru mengambil sertifikasi tinggi. Mulai dari Security+ → CySA+ → BTL1 → CISSP/GIAC. Setiap sertifikasi membangun fondasi untuk level berikutnya.

#Checklist Production Readiness

#Technical Checklist

Logging & telemetry pipeline operational
SIEM deployed with essential dashboards
Detection rules written & tuned (Sigma format)
Network monitoring (IDS/Zeek) operational
EDR/XDR deployed & configured
Threat hunting program established
Incident response playbooks documented
Vulnerability management program running
Threat intelligence integrated

#Operational Checklist

SOC tiers defined (L1/L2/L3)
Shift operations & handover procedures
Escalation paths documented
Case management system deployed
SOAR automation for common tasks
Compliance reporting (NIST/ISO/SOC2)
Purple team exercises scheduled quarterly
Training program for new analysts

#Personal Readiness

Can read & analyze Windows/Linux logs fluently
Can write Sigma detection rules
Can perform basic threat hunting with KQL
Can analyze basic malware samples
Can perform phishing email analysis
Can conduct basic forensic procedures
Can use SIEM effectively (Wazuh/Splunk/Elastic)
Can communicate findings to non-technical stakeholders

#Sumber Resmi

Sumber	URL	Isi
MITRE ATT&CK	attack.mitre.org	Framework teknik attacker
SANS SOC Curriculum	sans.org	Training & certification
Blue Team Level 1	blue team labs	Hands-on SOC training
CyberDefenders	cyberdefenders.org	Challenge labs
Splunk/Elastic/Wazuh	Docs resmi	Tool documentation

#Penutup

Kalian telah menyelesaikan 28 episode Belajar Security Analyst — dari prasyarat dasar hingga tren AI-native SOC. Perjalanan ini memberikan fondasi yang kuat, tapi ingat: keamanan siber adalah disiplin yang harus terus dipelajari. Threat landscape berubah setiap hari, dan analyst yang berhenti belajar akan tertinggal.

Inti yang harus dibawa pulang:

SOC analyst adalah garda depan pertahanan siber — peran yang kritis dan berkembang.
Detection engineering adalah keterampilan inti: tulis, uji, tune, ulangi.
AI adalah amplifier, bukan pengganti — analyst + AI lebih kuat dari keduanya secara terpisah.
Purple team collaboration memastikan deteksi benar-benar berfungsi.
Terus belajar, terus berburu, terus memperbaiki.

Terima kasih sudah menemani perjalanan 28 episode ini. Dunia keamanan siber membutuhkan profesional yang terampil dan berkomitmen — dan kalian baru saja mengambil langkah besar menuju arah itu. Sampai jumpa di series berikutnya, dan tetap semangat!