L2 SOC Analyst

Pride Global; Cyberjaya; On-site; MYR 60,000 - 90,000; Full time

Job summary

Jora Malaysia is seeking an experienced L2 SOC Analyst to handle advanced security alert investigation, incident response, threat hunting, and technical escalation. The role will also provide guidance to junior analysts and support continuous improvement of SOC detection and response capabilities.

Responsibilities include investigating alerts from SIEM/EDR/cloud sources, correlating logs to build timelines, validating IOCs, and escalating high-severity incidents.

Qualifications

• 3–5 years of SOC/Cybersecurity experience.
• Hands-on experience with Microsoft Sentinel and Defender XDR/EDR or equivalent.
• Good knowledge of KQL and security log analysis.
• Strong understanding of incident investigation, phishing, malware, identity, endpoint, and network security.
• Knowledge of MITRE ATT&CK and Threat Intelligence.
• Good analytical, communication, and escalation-management skills.

Responsibilities

• Perform L2 investigation and triage of security alerts/incidents.
• Analyze alerts from SIEM, EDR/XDR, identity, network, email, and cloud sources.
• Correlate logs and establish the incident timeline.
• Validate IOCs and assess threat severity and impact.
• Escalate confirmed/high-severity incidents within defined SLA.
• Support threat hunting and detection/use-case tuning.
• Perform RCA for significant incidents and recommend corrective actions.
• Maintain accurate investigation notes and incident documentation.
• Support L1 analysts with technical guidance and troubleshooting.

Skills

SOC/Cybersecurity experience

KQL

Threat intelligence

Incident investigation

Escalation management

Communication skills

Tools

Microsoft Sentinel

Defender XDR/EDR

Splunk

QRadar

Arcsight

Palo Alto

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

We are seeking an experienced L2 SOC Analyst to handle advanced security alert investigation, incident response, threat hunting, and technical escalation. The role will also provide guidance to junior analysts and support continuous improvement of SOC detection and response capabilities.

Key Responsibilities

• Perform L2 investigation and triage of security alerts/incidents.
• Analyze alerts from SIEM, EDR/XDR, identity, network, email, and cloud sources.
• Correlate logs and establish the incident timeline.
• Validate IOCs and assess threat severity and impact.
• Escalate confirmed/high-severity incidents within defined SLA.
• Support threat hunting and detection/use-case tuning.
• Perform RCA for significant incidents and recommend corrective actions.
• Maintain accurate investigation notes and incident documentation.
• Support L1 analysts with technical guidance and troubleshooting.

Requirements

• 3–5 years of SOC/Cybersecurity experience.
• Hands-on experience with Microsoft Sentinel and Defender XDR/EDR or equivalent.
• Good knowledge of KQL and security log analysis.
• Strong understanding of incident investigation, phishing, malware, identity, endpoint, and network security.
• Knowledge of MITRE ATT&CK and Threat Intelligence.
• Good analytical, communication, and escalation-management skills.

Preferred

• Experience with Defender for Endpoint, Entra ID, Defender for Identity, and Purview.
• Knowledge of SOAR, automation and Logic Apps.
• Experience with Splunk, QRadar, ArcSight, Trellix, or Palo Alto.
• Certifications: SC-200, GCIH, Security+ or CEH.