IT SECURITY & GOVERNANCE ANALYST (CSOC LEVEL 3)

Qaaf Resources Sdn. Bhd; Malaysia; On-site; MYR 60,000 - 85,000; Full time

Job summary

Qaaf Resources Sdn. Bhd is seeking an IT Security & Governance Analyst (CSOC Level 3) in Malaysia to monitor, detect, and respond to cyber threats. You will research threats, perform analytics, and conduct advanced threat hunting using MITRE ATT&CK patterns.

You will also develop detection use cases and mentor junior analysts. Applicants should have 4+ years in cyber incident response, threat hunting, or threat intelligence; Red Teaming experience is a plus.

Qualifications

• Minimum 4 years working experiences Cyber incident response/threat hunting/threat Intelligence.
• Experience in Red Teaming activities is an added advantage.
• Experience in malicious code analysis.
• Knowledge in scripting such as Visual Basic, Python and Batch programming is added advantage.

Responsibilities

• Keep up to date with latest security technology, methodology and development.
• Research emerging cyber threats and way to detect and manage them.
• Perform analytics to determine emerging threat patterns and vulnerabilities.
• Perform advance threat hunting based on scenarios/MITRE ATT&CK pattern.
• Perform advance Digital Forensic IR during incident response and investigation.
• Build use cases and detection methodologies, including but not limited to SIGMA, YARA or LUA.
• Identify potential weaknesses and implement measures.
• Provide guidance, mentoring and on the job training to the Cyber Response Analyst.
• Ensure knowledge and playbooks are consistently updated.
• Generate reports for both technical and non-technical audience and stakeholders.
• Investigate security alerts and provide incident response.
• Monitor for attacks, intrusions and unusual/unauthorized/illegal activities.
• Test and evaluate security technologies for CSOC

Skills

Threat hunting

Cyber incident response

Threat intelligence

Communication skills

On-site client engagement

Education

Master degree in cyber security

Tools

Visual Basic

Python

Batch scripting

Job description

IT SECURITY & GOVERNANCE ANALYST (CSOC LEVEL 3)

A professional at this position level must have the following responsibilities :-

• Keep up to date with latest security technology, methodology and development
• Research emerging cyber threats and way to detect and manage them
• Perform analytics to determine emerging threat patterns and vulnerabilities
• Perform advance threat hunting based on scenarios/MITRE ATT&CK pattern
• Perform advance Digital Forensic IR during incident response and investigation.
• Build use cases and detection methodologies, including but not limited to SIGMA. YARA or LUA.
• Identify potential weaknesses and implement measures.
• Provide guidance, mentoring and on the job training to the Cyber Response Analyst.
• Ensure knowledge and playbooks are consistently updated.
• Generate reports for both technical and non-technical audience and stakeholders
• Investigate security alerts and provide incident response.
• Monitor for attacks, intrusions and unusual/unauthorized/illegal activities.
• Test and evaluate security technologies for CSOC

Basic Qualifications

• Minimum 4 years working experiences Cyber incident response/threat hunting/threat Intelligence.
• Prior experience in Red Teaming activities is an added advantage.
• Experience in malicious code analysis.
• Knowledge in scripting such as Visual Basic, Python and Batch programming is added advantage. Skilled in preparing required documentation and presentation materials to stakeholders
• Fluent in English and Bahasa Malaysia

Advantages

• Relevant Master degree or Certification in relevant cyber security technologies or from well-known cyber security institutes such as SANS, ISACA, etc

Professional Skill Requirements

• Strong communication skills with the ability to communicate to all levels of the business
• Experience with direct communication and cooperation on-site client