全职 Security Operations Center Analyst 工作, 薪水, R Systems Selangor 公司招聘中 - Ricebowl

Overview

We are seeking highly motivated and experienced Senior SOC Analyst to join our growing security team. This role will be supporting day-to-day SOC L2 operations, incident investigation and threat hunting effort and contributing to the continuous improvement of our security posture. If you are passionate about cybersecurity, possess a keen eye for detail, and thrive in a fast-paced environment, we encourage you to apply.

Responsibilities

Security Operations:

• Conduct daily SOC L2 operations, where the focus is day-to-day investigations into security alerts and implementing initial protective countermeasures. Investigating signs of malicious activity or active threats.
• Using skills to triage, investigate and identify root causes. When the need arises, implementing initial blocking, containment or escalations to incident response personnel for further action based on defined triggers.
• Review multiple sources of correlated alerts from a wide range of sources such as SIEM, EDR, WAF plus ability to review further direct logs from Firewall, Proxy, NAC, IPS or other protective and detective controls.
• Be the point of contact for L1 escalations from external MSSP providers. Triage and disposition alerts and L1 escalations. Provide further tasking to L1 as needed.
• Update existing SOC run books while implement new strategies to detect and tune alerts.
• Perform day-to-day work on containment and eradication of detected threats.
• Operate within defined Mean Time to Acknowledge (MTTA), Mean Time to Detect (MTTD), and Mean Time to Respond (MTTR)

Hunting & Detection Engineering

• Proactively search for new emerging cyber threats, exploits, and other sophisticated attack techniques within our network and systems, including Living-of-the land and other sophisticated attack methods.
• Develop and utilize threat intelligence to identify new indicators of compromise (IOCs) and attack patterns.
• Leverage security tools and network telemetry to uncover stealthy activities and anomalous behaviors.
• Recommend tuning of existing detection rules, recommend new correlations or alerting rules

Process Improvement & Optimization

• Evaluate existing SOC processes, procedures, and tools for effectiveness and efficiency.
• Identify opportunities for automation and orchestration to streamline security operations.
• Develop and implement improvements to incident response playbooks, threat hunting frameworks, and other security workflows.
• Standardize and regularly update standard operating procedures (SOPs), and escalation matrices.
• Contribute to workflow automation and orchestration to optimize L2 analyst response capacity.

Required Qualifications

Skills and Experience We Are Looking For:

• Bachelor's degree in Computer Science, Information Security, or a related field; equivalent practical experience will be considered.
• 5+ years of experience in a dedicated security role, with a strong focus on incident response, security operations, or threat hunting.
• Proven experience with Security Information and Event Management (SIEM) platforms (e.g., Splunk, ArcSight, QRadar).
• In-depth understanding of network protocols, operating systems (Windows, Linux), and common attack vectors.
• Hands-on experience with endpoint detection and response (EDR) solutions.
• Strong analytical and problem-solving skills, with the ability to quickly assess complex situations and make sound decisions.
• Excellent written and verbal communication skills, with the ability to articulate technical concepts to both technical and non-technical audiences.
• Ability to work independently and as part of a team in a fast-paced, dynamic environment.

Preferred Qualifications

• Relevant industry certifications (e.g., CISSP, GCIH, GCFA, GNFA, OSCP, CISSP,CEH).
• Experience with scripting languages (e.g., Python, PowerShell) for automation and data analysis.
• Experience with vulnerability management and penetration testing concepts.
• Knowledge of forensic tools and techniques.
• Experience in a regulated industry (e.g., finance, healthcare).