EDR and Cloud Security Support

Atos Services (M) Sdn Bhd; Cyberjaya; On-site; MYR 60,000 - 90,000; Full time

Job summary

Atos Malaysia is seeking an experienced security analyst to monitor and triage EDR alerts, investigate endpoint detections, and coordinate containment of compromised devices. You will also monitor cloud workloads across AWS, Azure, and GCP, and correlate telemetry with SIEM data to support rapid remediation.

The role involves preparing daily security status reports and escalating incidents per the defined matrix, contributing to Atos' leadership in digital transformation and secure IT services.

Responsibilities

• Monitor and triage EDR alerts across endpoints and servers.
• Investigate endpoint detections for malware, ransomware, and suspicious behavior.
• Contain compromised endpoints per the response playbook.
• Manage EDR deployment, health, policy tuning, and exclusions.
• Respond to cloud security alerts from CSPM/CWPP and cloud-native tools.
• Monitor AWS, Azure, and GCP workloads and IAM activity.
• Correlate EDR and cloud telemetry with SIEM alerts.
• Prepare daily endpoint and cloud security status reports.
• Escalate confirmed incidents per escalation matrix.

Tools

EDR

SIEM

Cloud security

AWS

Azure

GCP

Threat intelligence

Job description

• 1 Monitor and triage EDR (Endpoint Detection and Response) alerts across endpoints and servers
• 2 Investigate endpoint detections for malware, ransomware and suspicious process behaviour
• 3 Perform host isolation and containment of compromised endpoints as per the response playbook
• 4 Manage EDR agent deployment, health, policy tuning and exclusion management
• 5 Respond to cloud security alerts from CSPM/CWPP and cloud-native tools (e.g. Defender for Cloud, GuardDuty)
• 6 Monitor cloud workloads, IAM activity and configuration drift across AWS, Azure and GCP
• 7 Investigate cloud posture findings and misconfigurations and recommend remediation actions
• 8 Correlate EDR and cloud telemetry with SIEM alerts for end-to-end investigation
• 9 Maintain blocklists, threat intelligence indicators and detection rules for endpoint and cloud
• 10 Track and report on vulnerabilities and threats affecting endpoints and cloud workloads
• 11 Coordinate with asset owners for remediation and patching of identified threats
• 12 Prepare daily endpoint and cloud security status reports
• 13 Escalate confirmed incidents to the Senior Analyst as per the escalation matrix

Atos is a global leader in digital transformation with 109,000 employees and annual revenue of around Euro 11 billion. European number one in cybersecurity, cloud and high performance computing, the Group provides tailored end-to-end solutions for all industries in 71 countries. A pioneer in decarbonization services and products, Atos is committed to a secure and decarbonized digital for its clients. Atos is a SE (Societas Europaea), listed on Euronext Paris and included in the CAC 40 ESG and Next 20 Paris Stock indexes.

The purpose of Atos is to help design the future of the information space. Its expertise and services support the development of knowledge, education and research in a multicultural approach and contribute to the development of scientific and technological excellences. Across the world, the Group enables its customers and employees, and members of societies at large to live, work and develop sustainably, in a safe and secure information space.

For more information, visit: https://atos.net/en/malaysia