L2 SOC Analyst

Pride Global; Selangor; On-site; MYR 60,000 - 110,000; Full time

Job summary

Pride Global seeks an experienced L2 SOC Analyst in Malaysia to handle advanced security alert investigations, incident response, threat hunting, and escalation. You will guide junior analysts and help improve SOC detection and response capabilities.

The role requires hands-on experience with Microsoft Sentinel and Defender XDR/EDR, knowledge of KQL, and familiarity with MITRE ATT&CK. Strong analytical and communication skills are essential for success.

Qualifications

• 3–5 years of SOC/Cybersecurity experience required.
• Hands-on experience with Microsoft Sentinel and Defender XDR/EDR and equivalent.
• Strong knowledge of KQL and security log analysis.
• Solid understanding of incident investigation, phishing, malware, identity, endpoint and network security.
• Knowledge of MITRE ATT&CK and Threat Intelligence.
• Good analytical, communication, and escalation-management skills.

Responsibilities

• Perform L2 investigation and triage of security alerts/incidents.
• Analyze alerts from SIEM, EDR/XDR, identity, network, email and cloud sources.
• Correlate logs and establish incident timeline.
• Validate IOCs and assess threat severity and impact.
• Escalate confirmed/high-severity incidents within defined SLA.
• Support threat hunting and detection/use-case tuning.
• Perform RCA for significant incidents and suggest corrective actions.
• Maintain accurate investigation notes and incident documentation.
• Support L1 analysts with technical guidance and troubleshooting.

Skills

SOC/Cybersecurity experience

Microsoft Sentinel

Defender XDR/EDR

KQL

Security log analysis

MITRE ATT&CK

Threat Intelligence

Incident investigation

Communication

Escalation management

Education

SC-200

GCIH

Security+

CEH

Tools

Splunk

QRadar

ArcSight

Trellix

Palo Alto

Job description

We are seeking an experienced L2 SOC Analyst to handle advanced security alert investigation, incident response, threat hunting, and technical escalation. The role will also provide guidance to junior analysts and support continuous improvement of SOC detection and response capabilities.

Key Responsibilities

• Perform L2 investigation and triage of security alerts/incidents.
• Analyze alerts from SIEM, EDR/XDR, identity, network, email, and cloud sources.
• Correlate logs and establish the incident timeline.
• Validate IOCs and assess threat severity and impact.
• Escalate confirmed/high-severity incidents within defined SLA.
• Support threat hunting and detection/use-case tuning.
• Perform RCA for significant incidents and recommend corrective actions.
• Maintain accurate investigation notes and incident documentation.
• Support L1 analysts with technical guidance and troubleshooting.

Requirements

• 3–5 years of SOC/Cybersecurity experience.
• Hands-on experience with Microsoft Sentinel and Defender XDR/EDR or equivalent.
• Good knowledge of KQL and security log analysis.
• Strong understanding of incident investigation, phishing, malware, identity, endpoint, and network security.
• Knowledge of MITRE ATT&CK and Threat Intelligence.
• Good analytical, communication, and escalation-management skills.

Preferred

• Experience with Defender for Endpoint, Entra ID, Defender for Identity, and Purview.
• Knowledge of SOAR, automation and Logic Apps.
• Experience with Splunk, QRadar, ArcSight, Trellix, or Palo Alto.
• Certifications: SC-200, GCIH, Security+ or CEH.