- Shah Alam Selangor Malaysia
Working Location
Job Description
Responsibilities
Contract: 12 months, extendable
Location: Subang Hitech, Shah Alam
Basic Salary: RM3000 and above
Shift Allowance: RM300 fixed
Job Description
As a SOC Analyst on this team, you aren't just a "ticket pusher." You are a frontline defender responsible for neutralizing threats in real-time. We are looking for a technical practitioner who understands the "why" behind an alert, not just the "what." You will hunt for anomalies, pivot through complex datasets, and orchestrate responses across a modern security stack.
Key Responsibilities:
Continuous Monitoring & Response: Monitor security alerts from various sources (SIEM, EDR, Firewall, other network assets) to identify, prioritize, and investigate potential security incidents.
Advanced Threat Hunting: Utilize Splunk Enterprise Security and SPL (Search Processing Language) to build custom dashboards, correlate disparate data logs, and proactively hunt for stealthy adversaries.
Endpoint Defense: Leverage CrowdStrike Falcon for real-time endpoint visibility, performing process tree analysis, host isolation, and remediation of malicious activity.
Vulnerability Management: Perform regular Vulnerability Assessments, interpreting scan results to provide actionable remediation guidance to infrastructure teams.
Network Security Oversight: Analyse Firewall logs (e.g., Palo Alto, Fortinet, or Cisco) to identify patterns of reconnaissance, lateral movement, or data exfiltration.
Incident Lifecycle Management: Own the incident response process from initial detection through to post-mortem reporting and root cause analysis.
Requirement
Skills and Qualifications:
Education: Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent work experience).
Experience: Previous experience in cybersecurity, IT security operations, or a SOC environment preferred.
Technical Skills:
SIEM Mastery: 2+ years of hands-on experience with Splunk Enterprise Security. You must be proficient in writing complex SPL queries to filter noise and find the "needle in the haystack."
EDR Expertise: Proven experience using CrowdStrike Falcon (or similar EDR tools) for threat detection, containment, and investigation.
Vulnerability Assessment: Experience with tools such as Tenable/Nessus, Qualys, or Rapid7 to identify and prioritize system weaknesses.
Network & Infrastructure: Solid understanding of TCP/IP, DNS, and HTTP/S. Ability to read and interpret firewall rules and packet captures (PCAP).
Framework Knowledge: Familiarity with the MITRE ATT&CK framework to map adversary tactics and techniques.
Certifications: CompTIA CySA+, GIAC (GCIH/GCIA), or Splunk Core Certified Advanced Power User or any relevant security certification.
Scripting: Ability to automate repetitive tasks using Python or PowerShell.
Cloud Security: Experience monitoring environments in Kubernetes and/or public cloud (AWS, Azure & GCP)
Work Location: Subang Hitech
Work Hours: 07.00 am - 07.00 pm / 07.00 pm - 07.00 am
Pay: RM2,800.00 - RM3,000.00 per month
Work Location: In person
Important Information
Never provide your bank or credit card details when applying for jobs. Do not transfer any money or complete unrelated online surveys. If you see something suspicious, Report this Job ad.