jobs in R Systems

Full Time Security Operations Center Analyst Jobs, in R Systems Selangor - Maukerja

Security Operations Center Analyst

R Systems

Share
Save

Working Location

  • Petaling Jaya Selangor Malaysia

Job Description

Responsibilities

Overview

We are seeking highly motivated and experienced Senior SOC Analyst to join our growing security team. This role will be supporting day-to-day SOC L2 operations, incident investigation and threat hunting effort and contributing to the continuous improvement of our security posture. If you are passionate about cybersecurity, possess a keen eye for detail, and thrive in a fast-paced environment, we encourage you to apply.


Responsibilities


Security Operations:


  • Conduct daily SOC L2 operations, where the focus is day-to-day investigations into security alerts and implementing initial protective countermeasures. Investigating signs of malicious activity or active threats.
  • Using skills to triage, investigate and identify root causes. When the need arises, implementing initial blocking, containment or escalations to incident response personnel for further action based on defined triggers.
  • Review multiple sources of correlated alerts from a wide range of sources such as SIEM, EDR, WAF plus ability to review further direct logs from Firewall, Proxy, NAC, IPS or other protective and detective controls.
  • Be the point of contact for L1 escalations from external MSSP providers. Triage and disposition alerts and L1 escalations. Provide further tasking to L1 as needed.
  • Update existing SOC run books while implement new strategies to detect and tune alerts.
  • Perform day-to-day work on containment and eradication of detected threats.
  • Operate within defined Mean Time to Acknowledge (MTTA), Mean Time to Detect (MTTD), and Mean Time to Respond (MTTR)


Hunting & Detection Engineering

  • Proactively search for new emerging cyber threats, exploits, and other sophisticated attack techniques within our network and systems, including Living-of-the land and other sophisticated attack methods.
  • Develop and utilize threat intelligence to identify new indicators of compromise (IOCs) and attack patterns.
  • Leverage security tools and network telemetry to uncover stealthy activities and anomalous behaviors.
  • Recommend tuning of existing detection rules, recommend new correlations or alerting rules
  • Process Improvement & Optimization

    • Evaluate existing SOC processes, procedures, and tools for effectiveness and efficiency.
    • Identify opportunities for automation and orchestration to streamline security operations.
    • Develop and implement improvements to incident response playbooks, threat hunting frameworks, and other security workflows.
    • Standardize and regularly update standard operating procedures (SOPs), and escalation matrices.
    • Contribute to workflow automation and orchestration to optimize L2 analyst response capacity.


    Required Qualifications

    Skills and Experience We Are Looking For:

    • Bachelor's degree in Computer Science, Information Security, or a related field; equivalent practical experience will be considered.
    • 5+ years of experience in a dedicated security role, with a strong focus on incident response, security operations, or threat hunting.
    • Proven experience with Security Information and Event Management (SIEM) platforms (e.g., Splunk, ArcSight, QRadar).
    • In-depth understanding of network protocols, operating systems (Windows, Linux), and common attack vectors.
    • Hands-on experience with endpoint detection and response (EDR) solutions.
    • Strong analytical and problem-solving skills, with the ability to quickly assess complex situations and make sound decisions.
    • Excellent written and verbal communication skills, with the ability to articulate technical concepts to both technical and non-technical audiences.
    • Ability to work independently and as part of a team in a fast-paced, dynamic environment.


    Preferred Qualifications

    • Relevant industry certifications (e.g., CISSP, GCIH, GCFA, GNFA, OSCP, CISSP,CEH).
    • Experience with scripting languages (e.g., Python, PowerShell) for automation and data analysis.
    • Experience with vulnerability management and penetration testing concepts.
    • Knowledge of forensic tools and techniques.
    • Experience in a regulated industry (e.g., finance, healthcare).


    Important Information

    Never provide your bank or credit card details when applying for jobs. Do not transfer any money or complete unrelated online surveys. If you see something suspicious, Report this Job ad.

    Learn More