全职 Senior SOC Analyst (L2) 工作, 薪水, RMJ Consulting Selangor 公司招聘中 - Ricebowl

Location: PJ City, Petaling Jaya

Employment Type: 6-Month Contract (Extendable)

Career Opportunity: Potential conversion to Permanent based on good performance

Responsibilities

Security Operations:

· Conduct daily SOC L2 operations, where the focus is day-to-day investigations into security alerts and implementing initial protective countermeasures. Investigating signs of malicious activity or active threats.

· Using skills to triage, investigate and identify root causes. When the need arises, implementing initial blocking, containment or escalations to incident response personnel for further action based on defined triggers.

· Review multiple sources of correlated alerts from a wide range of sources such as SIEM, EDR, WAF plus ability to review further direct logs from Firewall, Proxy, NAC, IPS or other protective and detective controls.

· Be the point of contact for L1 escalations from external MSSP providers. Triage and disposition alerts and L1 escalations. Provide further tasking to L1 as needed.

· Update existing SOC run books while implement new strategies to detect and tune alerts.

· Perform day-to-day work on containment and eradication of detected threats.

· Operate within defined Mean Time to Acknowledge (MTTA), Mean Time to Detect (MTTD), and Mean Time to Respond (MTTR)

Hunting & Detection Engineering

· Proactively search for new emerging cyber threats, exploits, and other sophisticated attack techniques within our network and systems, including Living-of-the land and other sophisticated attack methods.

· Develop and utilize threat intelligence to identify new indicators of compromise (IOCs) and attack patterns.

· Leverage security tools and network telemetry to uncover stealthy activities and anomalous behaviors.

· Recommend tuning of existing detection rules, recommend new correlations or alerting rules

Process Improvement & Optimization

· Evaluate existing SOC processes, procedures, and tools for effectiveness and efficiency.

· Identify opportunities for automation and orchestration to streamline security operations.

· Develop and implement improvements to incident response playbooks, threat hunting frameworks, and other security workflows.

· Standardize and regularly update standard operating procedures (SOPs), and escalation matrices.

· Contribute to workflow automation and orchestration to optimize L2 analyst response capacity.

Required Qualifications Skills and Experience We Are Looking For:

· Bachelor's degree in Computer Science, Information Security, or a related field; equivalent practical experience will be considered.

· 4+ years of experience in a dedicated security role, with a strong focus on incident response, security operations, or threat hunting.

· Proven experience with Security Information and Event Management (SIEM) platforms (e.g., Splunk, ArcSight, QRadar).

· In-depth understanding of network protocols, operating systems (Windows, Linux), and common attack vectors.

· Hands-on experience with endpoint detection and response (EDR) solutions.

· Strong analytical and problem-solving skills, with the ability to quickly assess complex situations and make sound decisions.