Cybersecurity Analyst - SOC Lead & Incident Response

Ericsson; Petaling Jaya; On-site; MYR 90,000 - 180,000; Full time

Job summary

Ericsson is seeking a Cybersecurity Analyst to lead the Managed Service security operations. You will guide SOC L1, monitor events, and coordinate with L2/L3 for advanced detections and responses.

The role requires real-time analysis, incident management, and engagement with stakeholders to ensure policy and security compliance. You will work within a diverse team to minimize business impact, enhance automation, and deliver governance and threat intelligence updates.

Qualifications

• Diploma/Eng/BTech in Telecommunication/ Network Security/ Cyber Security/ IT.
• 3-5 years in Information/Network Security/Cyber Security/IT.

Responsibilities

• Provide technical guidance to the SOC L1 team for monitoring, detection, and initial incident triage; coordinate with SOC L2 and L3 for new attack UC development, deployment and improvement.
• Analyze security events in real time and assess risks based on monitoring data; follow procedures to mitigate.
• Manage, coordinate and escalate security incidents according to IR processes and SLAs.
• Drive improvements in service and processes with automation, AI/ML technologies.
• Prepare governance reports, operational reviews, and threat intel updates for management.
• Conduct RCA to identify lessons learned and preventive actions.
• Oversee MSS activities ensuring deliverables meet WLA and policy requirements.
• Provide on-call and out-of-hours support for critical incidents to maintain service continuity.
• Lead customer discussions on SIEM use cases and weekly events reviews.

Skills

SIEM expertise

Incident response

Security monitoring

Threat intelligence

Automation/ML interest

Linux/Windows

Communication skills

Education

Diploma/Eng/BTech in related field

3-5 years Info/Security

Tools

ESM

Nessus

Tenable

Job description

Ericsson is seeking a Cybersecurity Analyst to lead the Managed Service security operations. You will guide SOC L1, monitor events, and coordinate with L2/L3 for advanced detections and responses.

The role requires real-time analysis, incident management, and engagement with stakeholders to ensure policy and security compliance. You will work within a diverse team to minimize business impact, enhance automation, and deliver governance and threat intelligence updates.