Cyber Threat Analyst

Gas Malaysia Berhad; Selangor; On-site; MYR 80,000 - 100,000; Full time

Job summary

A leading energy company located in Malaysia is seeking a Cybersecurity Specialist to oversee the organization's security operations and compliance with IT policies. You will analyze threats, manage SIEM tools, and conduct vulnerability assessments while ensuring the company's cybersecurity standards meet local regulations. The position requires relevant certifications and strong interpersonal skills. This full-time role may require working beyond normal hours, offering a chance to contribute significantly to the organization’s security posture.

Qualifications

• Bachelor Degree in Information Security or equivalent with minimum CGPA 3.00 & above.
• Minimum of 3–5 years of experience in cybersecurity operations, SOC, or incident response.
• Certified Ethical Hacker (CEH) or any professional Network and Cyber Security certification necessary.

Responsibilities

• Monitor OSINT, dark web, threat feeds to identify threats relevant to the organization.
• Conduct vulnerability assessments and penetration testing to support proactive threat hunting.
• Collaborate with the SOC to monitor and respond to security incidents.

Skills

Cybersecurity operations

Threat intelligence

Incident response

Analytical skills

Problem-solving

Education

Bachelor Degree in Information Security

Tools

XDR

SIEM

Firewalls

Malware Analysis tools

Job description

Department: Group Information Technology

Reporting to: Cybersecurity Lead

Responsibilities

• Responsible for protecting an organization's computers, networks, software, hardware, and data from malware and cyber-attacks.
• To ensure compliance of all IT operations across the company and its subsidiaries (Group) with the standardized IT policies and procedures, internal and external regulations, and proper IT Security governance structures.
• To demonstrate technical qualities in identifying, analyzing, and reporting security threats.

The Job

• Monitor OSINT (Open-Source Intelligence), dark web, threat feeds, and industry reports to identify threats relevant to the organization.
• Enrich and maintain intelligence on adversaries, malware, vulnerabilities, and TTPs (Tactics, Techniques, and Procedures).
• Correlate intelligence with internal telemetry to detect risks and ongoing campaigns.
• Collaborate with the SOC to monitor, detect, and respond to security incidents.
• Analyze system and network traffic data, security logs, and alerts to identify potential attacks.
• Conduct incident investigations, root cause analysis, and recommend remediation.
• Escalate and document incidents following defined processes.

Security Operations & Risk Management

• Manage SIEM, XDR, firewalls, and detection tools to support proactive threat hunting.
• Conduct vulnerability assessments, penetration testing, and patch management.
• Assess and monitor IT project risks, operational risks, and change management initiatives.
• Provide guidance on access control, endpoint protection, and security best practices.

Governance & Compliance

• Conduct periodic assessments to ensure alignment with IT policies and procedures.
• Develop reports and dashboards for management and regulatory submissions.
• Work with IT/OT teams to ensure compliance with ISO 27001, NIST/IEC standards, Malaysia’s Cybersecurity Act 2024, and PDPA.

Requirements

• Bachelor Degree in Information Security or equivalent with minimum CGPA 3.00 & above.
• Minimum of 3–5 years of experience in cybersecurity operations, SOC, or incident response.
• Candidate shall be a Certified Ethical Hacker (CEH) or any professional Network and Cyber Security certification.
• Knowledge of threat intelligence, MITRE ATT&CK, and incident response frameworks.
• Strong IT skills and knowledge, including hardware, software, and networks.
• Hands‑on experience with XDR, firewalls, switches, routers, and other networking security appliances /endpoint security tools.
• Knowledge in Malware Analysis, Security Incident Response, Advanced Threat Protection, SIEM or SOAR, Privileged Access Management (PAM), Data Loss Prevention (DLP), Microsoft Intune or Mobile Device Management MDM.
• Working experience in performing Security Posture Assessment (SPA), IT Auditor (ISO 27001 ISMS), or Security Operation Centre (SOC) will be an added advantage.
• Good interpersonal and user-handling skills with the ability to manage expectations and communicate technical details.
• Logical and analytical approach to problem-solving.
• Contributes to team effort by accomplishing related results as needed.
• Able to work beyond normal working hours.

📧 Alternatively

You may email your resume/CV to @gasmalaysia.com and kindly include your notice period, expected salary and together with your Degree Transcript.