EDR & Cloud Security Support Specialist

Pride Global; Selangor; On-site; MYR 70,000 - 120,000; Full time

Job summary

Pride Global in Malaysia is seeking an experienced EDR & Cloud Security Support Specialist to monitor, investigate, and respond to security alerts across EDR/XDR and cloud environments, ensuring remediation within SLAs. You will work with SOC and infrastructure teams, investigate incidents, malware, and credential activity, and support Defender for Cloud, Entra ID, and cloud IAM with strong troubleshooting.

3–5+ years of hands-on security experience is required.

Qualifications

• 3–5+ years of experience in EDR, endpoint security, cloud security or SOC operations.
• Hands-on with Microsoft Defender for Endpoint / Defender XDR or equivalent EDR/XDR.
• Good understanding of endpoint telemetry and security investigations.
• Experience investigating malware, ransomware, PowerShell and endpoint compromise.
• Strong knowledge of Azure security and Entra ID; Defender for Cloud familiarity.
• Understanding of cloud IAM, networking, security controls and logging.
• Good incident management, escalation and SLA awareness.

Responsibilities

• Monitor and investigate EDR/XDR security alerts and incidents.
• Perform endpoint investigations covering processes, files, hashes, and network activity.
• Investigate malware, ransomware, PowerShell and credential-related activity.
• Isolate, remediate and perform approved response actions.
• Monitor endpoint health, sensor status and protection coverage.
• Troubleshoot EDR agent deployment, connectivity and telemetry issues.
• Support EDR policy configuration, exclusions and alert tuning.
• Coordinate with SOC, Infra and Endpoint teams for remediation.
• Track unresolved issues and ensure timely closure within SLA.
• Monitor and investigate security alerts across Azure/AWS/GCP environments.
• Support Microsoft Defender for Cloud and cloud security monitoring.
• Investigate suspicious cloud authentication and privilege escalation.
• Monitor cloud security posture, recommendations and alerts.
• Support Entra ID investigations and cloud security logging/SIEM integration.

Skills

EDR/XDR security

Security investigations

Troubleshooting

Incident response

Tools

Microsoft Defender for Endpoint

Defender XDR

Azure security

Entra ID

Microsoft Defender for Cloud

Cloud IAM & logging

Job description

We are seeking an experienced EDR & Cloud Security Support Specialist to provide monitoring, administration, troubleshooting, investigation, and operational support for EDR/XDR and cloud security platforms. The role will ensure endpoint and cloud security threats are detected, investigated, escalated, and remediated within defined SLAs.

Key Responsibilities

• Monitor and investigate EDR/XDR security alerts and incidents.
• Perform endpoint investigations covering processes, command lines, files, hashes, network connections, and user activity.
• Investigate malware, ransomware, PowerShell, persistence, lateral movement, and credential-related activities.
• Perform endpoint isolation, remediation, and other approved response actions.
• Monitor endpoint health, sensor/agent status, and protection coverage.
• Troubleshoot EDR agent deployment, connectivity, policy, and telemetry issues.
• Support EDR policy configuration, exclusions, and alert tuning.
• Coordinate with SOC, Infrastructure, and Endpoint teams for incident remediation.
• Track unresolved EDR issues and ensure timely closure within SLA.
• Monitor and investigate security alerts across Azure/AWS/GCP environments.
• Support Microsoft Defender for Cloud and cloud security monitoring.
• Investigate suspicious cloud authentication, privilege escalation, resource changes, and anomalous activity.
• Monitor cloud security posture, recommendations, and security alerts.
• Support Entra ID identity and authentication investigations.
• Support remediation of cloud security findings and assist with cloud security incident response and RCA.
• Support cloud security logging and SIEM integration.

Requirements

• 3-5+ years of experience in EDR, endpoint security, cloud security, or SOC operations.
• Hands-on experience with Microsoft Defender for Endpoint / Defender XDR or equivalent EDR/XDR.
• Good understanding of endpoint telemetry and security investigation.
• Experience investigating malware, ransomware, PowerShell, suspicious processes, and endpoint compromise.
• Good understanding of Azure security and Entra ID.
• Working knowledge of Microsoft Defender for Cloud.
• Understanding of cloud IAM, networking, security controls, and logging.
• Strong technical troubleshooting and investigation skills.
• Good understanding of incident management, escalation, and SLA processes.

Preferred

• Experience with AWS/GCP security.
• Knowledge of Defender for Identity, Defender Vulnerability Management, and Intune.
• Experience with Microsoft Sentinel and KQL.
• Knowledge of CSPM/CWPP concepts.
• Experience with Trellix, CrowdStrike, SentinelOne, or Palo Alto Cortex XDR.
• Knowledge of MITRE ATT&CK and Threat Hunting.
• Understanding of cloud security frameworks and CIS Benchmarks.