Job Overview
We are seeking an experienced Security Analyst (L2) to strengthen cybersecurity operations, manage security incidents and enhance the organization’s overall security posture.
The successful candidate will be responsible for monitoring security threats, investigating suspicious activities, managing vulnerabilities and supporting incident response activities. The role also involves optimizing security tools, improving threat detection capabilities and collaborating with technical teams to safeguard critical IT systems and infrastructure.
Key Responsibilities
Security Monitoring & Incident Management
- Monitor security events and investigate suspicious activities across enterprise systems and networks.
- analyze security incidents involving malware, ransomware, phishing, compromised accounts and potential data breaches.
- Coordinate incident containment, threat elimination and system recovery activities.
- Perform root cause analysis and recommend corrective measures to prevent recurring incidents.
- Work closely with internal IT teams and security operations personnel to ensure timely incident resolution.
Vulnerability & Risk Management
- Conduct vulnerability assessments and evaluate security weaknesses across IT environments.
- Review assessment findings, determine risk severity and recommend appropriate remediation priorities.
- Coordinate with infrastructure and application teams on security patching and vulnerability resolution.
- Track remediation progress, outstanding security risks and corrective actions.
- Prepare vulnerability reports and provide updates on security exposure.
Security Tools & Threat Detection
- Administer, monitor and optimize security solutions, including SIEM, SOAR, EDR/XDR and endpoint protection platforms.
- Fine-tune security alerts, detection rules and monitoring configurations to improve threat identification and minimize false positives.
- Support security controls for email protection, web security, Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB).
- Assist with integrating security monitoring platforms into existing enterprise systems.
- Analyze emerging cyber threats and recommend improvements to security controls.
Security Governance & Continuous Improvement
- Support cybersecurity governance, risk assessments and compliance activities.
- Maintain security documentation, incident procedures and operational guidelines.
- Participate in security audits and third-party risk assessments.
- Provide security recommendations and guidance to IT teams and business users.
- Support cybersecurity awareness initiatives, including phishing simulation exercises.
- Identify opportunities to improve security processes through automation, monitoring enhancements and operational reporting.
- Prepare security performance reports, risk metrics and management updates.
Requirements
- Degree in Computer Science, Information Technology, Cybersecurity or a related discipline.
- Minimum 3 years of relevant IT experience, preferably in cybersecurity operations, security monitoring or incident response.
- Good understanding of IT infrastructure, networking, server environments and endpoint security.
- Experience using cybersecurity solutions such as SIEM, endpoint protection and vulnerability assessment tools.
- Familiarity with security technologies such as Microsoft Sentinel, Securonix, CyberArk or Tenable Nessus.
- Knowledge of security incident investigation, threat detection, vulnerability management and remediation processes.
- Understanding of cybersecurity frameworks and regulatory requirements, including ISO 27001, NIST, PDPA, GDPR or SOC 2.
- Ability to analyze security events, identify potential threats and recommend appropriate mitigation measures.
- Strong analytical, troubleshooting, communication and stakeholder coordination skills.
- Ability to work independently and collaborate effectively with technical and business teams.
Preferred Qualifications
- Professional certifications such as CISSP, CompTIA Security+, QISP or Cybersecurity Nexus.
- Experience with SIEM/SOAR, EDR/XDR, DLP or CASB solutions.
- Exposure to security automation, threat intelligence and security detection optimization.
- Experience supporting security audits, risk assessments or cybersecurity awareness programmes.
Please send your detailed resume in MS Word format to ************* with
- Education Level
- Working experiences
- Each employment background
- Reason for leaving each employment
- Last drawn salary
- Expected salary
- Date of availability