Cybersecurity Analyst

Ericsson; Petaling Jaya; On-site; MYR 90,000 - 180,000; Full time

Job summary

Ericsson is seeking a Cybersecurity Analyst to lead the Managed Service security operations. You will guide SOC L1, monitor events, and coordinate with L2/L3 for advanced detections and responses.

The role requires real-time analysis, incident management, and engagement with stakeholders to ensure policy and security compliance. You will work within a diverse team to minimize business impact, enhance automation, and deliver governance and threat intelligence updates.

Qualifications

• Diploma/Eng/BTech in Telecommunication/ Network Security/ Cyber Security/ IT.
• 3-5 years in Information/Network Security/Cyber Security/IT.

Responsibilities

• Provide technical guidance to the SOC L1 team for monitoring, detection, and initial incident triage; coordinate with SOC L2 and L3 for new attack UC development, deployment and improvement.
• Analyze security events in real time and assess risks based on monitoring data; follow procedures to mitigate.
• Manage, coordinate and escalate security incidents according to IR processes and SLAs.
• Drive improvements in service and processes with automation, AI/ML technologies.
• Prepare governance reports, operational reviews, and threat intel updates for management.
• Conduct RCA to identify lessons learned and preventive actions.
• Oversee MSS activities ensuring deliverables meet WLA and policy requirements.
• Provide on-call and out-of-hours support for critical incidents to maintain service continuity.
• Lead customer discussions on SIEM use cases and weekly events reviews.

Skills

SIEM expertise

Incident response

Security monitoring

Threat intelligence

Automation/ML interest

Linux/Windows

Communication skills

Education

Diploma/Eng/BTech in related field

3-5 years Info/Security

Tools

ESM

Nessus

Tenable

Job description

Grow with us

Our Exciting Opportunity

We are looking for a Cybersecurity Analyst to lead and contribute to the Ericsson Managed Service team.

The successful candidate should have advanced domain knowledge on information security and act as a point of contact for Security Operations Team teams to deliver the security services effectively.

This position will also be responsible for supporting detection engineering, security incident management, including coordinating cybersecurity related investigations, and incident response in partnership with the respective stakeholders within Ericsson and/or customer organization and/or 3rd Party Providers.

The professional will also manage and work alongside a highly skilled, diverse team, making sure that the information assets that we are responsible for protecting are secured and adhered to customer policy and national security requirements.

Key Responsibilities

• Provide technical guidance and support to the SOC Level 1 team in proactive security event monitoring, detection, and initial incident triage. Cor-ordinate with SOC L2 and SOC L3 for new attack UC development, deployment and continuous improvement.
• Conduct timely analysis of security events, threats, and attacks based on real-time monitoring, and follow established procedures to assess and mitigate associated risks.
• Manage, coordinate, and elevate security incidents appropriately, ensuring adherence to defined incident response processes and service level commitments.
• Drive continuous service and process improvement initiatives by identifying optimization opportunities and contributing to competency development in automation, Artificial Intelligence (AI), and Machine Learning (ML) technologies.
• Monitor operational performance and prepare, maintain, and distribute relevant reports and presentations, including governance reports, operational review materials, use case assessments, and threat intelligence updates.
• Conduct Root Cause Analysis (RCA) activities to identify lessons learned and recommend corrective and preventive actions.
• Prepare periodic operational, security, and performance reports, and present findings, recommendations, and status updates to management when required.
• Manage and oversee Managed Security Services activities, ensuring all deliverables are met in accordance with the Work Level Agreement (WLA), project requirements, organizational policies, industry standards, and established operational procedures.
• Provide on-call and out-of-hours support for critical security incidents, major events, and operational issues as required to ensure service continuity and effective incident resolution
• Drive security compliance adherence using Ericsson Security Manager (ESM) ensuring 100% compliance on security controls baseline on the supported nodes.
• Support any assigned projects when it comes to user access testing and acceptance.
• Lead customer discussion on operation updates especially on SIEM use case review, weekly events review.

Join our Team

Qualifications:

Diploma/B. Eng/ B.Tech. in Telecommunication/ Network Security/ Cyber Security/IT

Industry experience

3 - 5 years in Information/Network Security/Cyber Security/IT

Key competencies

• Cybersecurity certifications will be an advantage, hands-on experience is highly recommended
• Very good knowledge and understanding of Managed Services delivery model and its processes, with special focus on Managed Security Services
• Basic domain knowledge on information security, security control frameworks and Information Technology
• Experience with the interpretation of quality indicators to detect weaknesses and implement corrective action,
• Proactive approach to minimize or eliminate the business-critical impacts,
• End user orientation/customer orientation with excellent understanding of service providers/operators’ business requirements - be able to create true client value,
• Basic knowledge of a Security Information and Event Management System (SIEM), vulnerability scanning system such as Nessus, Tenable, and Compliance/Threat Detection tools such as Ericsson Security Manager (ESM).
• Knowledge of both Linux-based and MS Windows-based systems with technical understanding and aptitude for analytical problem-solving, knowledge of IP networking

Non-technical competencies

• Language: Fluent in written and spoken English. Additional language skills are a plus,
• Excellent communication/presentation skills including the ability to translate technical/security issues to business users,
• Results oriented with good skills in leading and motivating people and conscious of responsibility,
• A thorough and methodical approach to work; strong management of Processes
• Highly developed skills in knowledge sharing by actively contributing knowledge, experiences, and skills to create a learning culture. Have ability to develop a training plan and mentoring program,
• Analytical approach to problems and innovative,
• Ability to cope in a fast-changing environment; flexible and responsive to changing work patterns, balance multiple and conflicting demands & work constructively under pressure

Additional Information

• The work will include travel in most of the locations where customer will be represented.

Why join Ericsson?

At Ericsson, you´ll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what´s possible. To build solutions never seen before to some of the world’s toughest problems. You´ll be challenged, but you won’t be alone. You´ll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next.

Encouraging a diverse and inclusive organization is core to our values at Ericsson, that's why we champion it in everything we do. We truly believe that by collaborating with people with different experiences we drive innovation, which is essential for our future growth. We encourage people from all backgrounds to apply and realize their full potential as part of our Ericsson team. Ericsson is proud to be an Equal Opportunity Employer. learn more.

Primary country and city:

Malaysia (MY) || Bandar Sunway