jobs in Hiree

全职 Senior SOC Analyst 工作, 薪水 up to MYR 7,000, Hiree Federal Territory 公司招聘中 - Ricebowl

Senior SOC Analyst

KL City, Federal Territory

分享
保存

工作地点

  • Kuala Lumpur Federal Territory Malaysia

职位描述

岗位职责

Overview

We are seeking highly motivated and experienced Senior SOC Analyst to join our growing security team. This role will be supporting day-to-day SOC L2 operations, incident investigation and threat hunting effort and contributing to the continuous improvement of our security posture. If you are passionate about cybersecurity, possess a keen eye for detail, and thrive in a fast-paced environment, we encourage you to apply.

Responsibilities

Security Operations:

· Conduct daily SOC L2 operations, where the focus is day-to-day investigations into security alerts and implementing initial protective countermeasures. Investigating signs of malicious activity or active threats.

· Using skills to triage, investigate and identify root causes. When the need arises, implementing initial blocking, containment or escalations to incident response personnel for further action based on defined triggers.

· Review multiple sources of correlated alerts from a wide range of sources such as SIEM, EDR, WAF plus ability to review further direct logs from Firewall, Proxy, NAC, IPS or other protective and detective controls.

· Be the point of contact for L1 escalations from external MSSP providers. Triage and disposition alerts and L1 escalations. Provide further tasking to L1 as needed.

· Update existing SOC run books while implement new strategies to detect and tune alerts.

· Perform day-to-day work on containment and eradication of detected threats.

· Operate within defined Mean Time to Acknowledge (MTTA), Mean Time to Detect (MTTD), and Mean Time to Respond (MTTR)

Hunting & Detection Engineering

· Proactively search for new emerging cyber threats, exploits, and other sophisticated attack techniques within our network and systems, including Living-of-the land and other sophisticated attack methods.

· Develop and utilize threat intelligence to identify new indicators of compromise (IOCs) and attack patterns.

· Leverage security tools and network telemetry to uncover stealthy activities and anomalous behaviors.

· Recommend tuning of existing detection rules, recommend new correlations or alerting rules

Process Improvement & Optimization

· Evaluate existing SOC processes, procedures, and tools for effectiveness and efficiency.

· Identify opportunities for automation and orchestration to streamline security operations.

· Develop and implement improvements to incident response playbooks, threat hunting frameworks, and other security workflows.

  • Standardize and regularly update standard operating procedures (SOPs), and escalation matrices.
  • Contribute to workflow automation and orchestration to optimize L2 analyst response capacity.

Required Qualifications

Skills and Experience We Are Looking For:

· Bachelor's degree in Computer Science, Information Security, or a related field; equivalent practical experience will be considered.

· 5+ years of experience in a dedicated security role, with a strong focus on incident response, security operations, or threat hunting.

· Proven experience with Security Information and Event Management (SIEM) platforms (e.g., Splunk, ArcSight, QRadar).

· In-depth understanding of network protocols, operating systems (Windows, Linux), and common attack vectors.

· Hands-on experience with endpoint detection and response (EDR) solutions.

· Strong analytical and problem-solving skills, with the ability to quickly assess complex situations and make sound decisions.

· Excellent written and verbal communication skills, with the ability to articulate technical concepts to both technical and non-technical audiences.

· Ability to work independently and as part of a team in a fast-paced, dynamic environment.

Preferred Qualifications

· Relevant industry certifications (e.g., CISSP, GCIH, GCFA, GNFA, OSCP, CISSP,CEH).

· Experience with scripting languages (e.g., Python, PowerShell) for automation and data analysis.

· Experience with vulnerability management and penetration testing concepts.

· Knowledge of forensic tools and techniques.

· Experience in a regulated industry (e.g., finance, healthcare).

Pay: RM6,000.00 - RM7,000.00 per month

Work Location: In person

重要安全守则

申请工作时,切勿提供您的银行或信用卡详细资料。不要转账或完成无关的在线调查问卷。如果您发现可疑内容,请举报此招聘广告。

了解更多