Cybersecurity Analyst L2/L3

Tech Staffing; Kuala Lumpur; In loco; MYR 90.000 - 150.000; Tempo pieno

Descrizione del lavoro

Tech Staffing in Kuala Lumpur is seeking an experienced Security Incident Response Specialist to lead incident workflow automation, monitor threats, and support the SOC L1/L2 analysts in incident response and threat hunting. The role emphasizes cyber threat analysis, log inspection, and real-time monitoring across multiple data sources.

Candidates should bring at least 5 years in SIEM/incident response, with hands-on experience in Azure Sentinel, QRadar, or Splunk.

Competenze

• Minimum 5 years experience in SIEM and/or response to information security threats or incidents.
• Experience in Azure Sentinel, QRadar or Splunk.
• Strong understanding of email security, forensics, monitoring and incident response, vulnerability assessment, and web app firewall.

Mansioni

• Develop incident response workflow that can be automated.
• Perform security monitoring gap analysis and build processes/frameworks for continuous evaluation and increased detection coverage.
• Support SOC L1/L2 Analysts during incident response, event monitoring and threat hunting activities.
• Provide cyber threat analysis support, research, and remediation recommendations.
• Analyze logs from host, network, firewall, IDS to identify threats to network security.
• Perform real-time monitoring and analysis of security events from multiple sources.
• Triage security events to determine priority and severity.
• Proactively review customer environments for suspicious behavior across network, host, and logs data.
• Assist in developing analytic signatures to identify suspicious and malicious behavior.

Conoscenze

Incident response

Threat hunting

Security monitoring

Log analysis

SOC collaboration

Strumenti

Azure Sentinel

QRadar

Splunk

Descrizione del lavoro

Job Summary

• Develop incident response workflow that can be automated
• Perform security monitoring gap analysis and build corresponding process/framework for continuous evaluation as well as increase detection coverage
• Provide support to the Security Operations Center's L1/L2 Analysts during incident response, event monitoring and threat hunting activities
• Cyber threat analysis support, research, and recommending appropriate remediation and mitigation
• Perform analysis of log files from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs, and intrusion detection system [IDS] logs) to identify possible threats to network security
• Perform real-time monitoring and analysis of security events from multiple sources
• Triage security events to determine priority and severity
• Proactively review customers environments searching for suspicious behavior across network, host and logs data.
• Assist in the development of analytic signatures to identify suspicious and malicious behavior

Requirements:

• Min 5 years experience in SIEM and/or response to information security threats or incidents
• Experience in Azure Sentinel, QRadar or Splunk
• Deep understanding of following areas: Email security (including Document analysis), digital media forensics, monitoring and detection, incident response, vulnerability assessment, penetration testing, cyber intelligence analysis, and Web Application Firewall (WAF)
• This is permanent headcount; the role is based in KL