L2 SOC Analyst/Lead

Neuron Solutions Sdn. Bhd.; Kuala Lumpur; Vor Ort; MYR 150.000 - 230.000; Vollzeit

Zusammenfassung

Neuron Solutions Sdn. Bhd. seeks a seasoned Security Operations Centre Engineer to lead MSSP Tier 1 SOC activities across Malaysia and the UK. You will manage Microsoft Sentinel, CrowdStrike Falcon EDR, and ITSM tickets, liaising with technical teams and executives to drive timely incident response and reporting.

The role emphasizes RCA, threat containment, policy development, vulnerability management, and security awareness training for IT teams and users in Malaysia and the UK.

Qualifikationen

• Bachelor's degree in Cyber Security, IT, or related field.
• 7-9 years in cyber security operations, incl. 3-4 years Tier 2 SOC/IR/Security Engineering.
• Experience with MSSP-managed Tier 1 SOC preferred.
• Hands-on with Microsoft Sentinel and Entra ID security monitoring.

Aufgaben

• Serve as SPOC for MSSP Tier 1 SOC team and manage alerts across Malaysia and UK.
• Investigate and respond to security incidents per CIR plan within defined SLAs.
• Lead RCA, incident reports, and deliver security updates to teams, stakeholders, and executives.
• Monitor Entra ID and on-premises AD for suspicious activity, privilege abuse, MFA gaps, and risky sign-ins.
• Coordinate vulnerability scanning, High and Critical CVE patch reviews, firewall configuration audits, and access reviews.
• Develop and maintain security policies, IR playbooks, DR/BCP, risk registers, and risk frameworks.
• Create and fine-tune Sentinel detection rules, KQL queries, automation scripts, and threat hunting use cases.
• Deliver cyber security awareness training, phishing simulations, and threat intelligence briefings to IT teams and users in Malaysia and the UK.

Kenntnisse

Microsoft Sentinel

KQL queries

Incident response

Threat detection

Security operations

Stakeholder management

Communication

Ausbildung

Bachelor's degree in Cyber Security / IT

Tools

CrowdStrike Falcon EDR

Fortinet FortiGate

Microsoft 365

Entra ID

Jobbeschreibung

Serve as the primary Point of Contact (SPOC) for the MSSP's Tier 1 SOC team, managing SIEM (Microsoft Sentinel), CrowdStrike Falcon EDR alerts, and ITSM tickets across Malaysia and UK properties.

Investigate and respond to security incidents in line with the Cyber Incident Response (CIR) plan, ensuring timely threat containment and remediation within defined SLAs.

Lead Root Cause Analysis (RCA), prepare incident reports, and deliver weekly and monthly security updates to technical teams, stakeholders, and executives.

Monitor Entra ID and on-premises Active Directory for suspicious account activity, privilege abuse, MFA gaps, and risky sign-ins.

Coordinate vulnerability scanning, High and Critical CVE patch reviews, firewall configuration audits, and Joiner/Mover/Leaver access reviews.

Develop and maintain security policies, incident response playbooks, Disaster Recovery and Business Continuity Plans, risk registers, and risk management frameworks.

Create and fine-tune Sentinel detection rules, KQL queries, automation scripts, and threat hunting use cases.

Deliver cyber security awareness training, phishing simulations, and threat intelligence briefings to IT teams and users across Malaysia and the UK.

Requirements

Bachelor's degree in Cyber Security, Information Technology, or a related field.

7-9 years of experience in cyber security operations, including 3-4 years in a Tier 2 SOC, incident response, or security engineering role. Experience working with an MSSP-managed Tier 1 SOC is preferred.

Hands-on experience with Microsoft Sentinel, including KQL queries, analytics rules, log source onboarding, and detection tuning.

Strong knowledge of Microsoft 365 and Entra ID security monitoring, including MFA, Conditional Access, PIM, and risky sign-ins.

Experience with CrowdStrike Falcon EDR or comparable platforms, covering alert triage, IOC management, detection rules, and endpoint protection.

Working knowledge of Fortinet FortiGate firewalls and network security monitoring across multi-site environments.

Proven experience in incident response, threat containment, RCA, and executive-level incident reporting.

Good understanding of NIST CSF, ISO 27001, vulnerability management, compliance audits, and user access reviews.

Strong communication and stakeholder management skills, with the ability to liaise with technical teams and executive stakeholders across Malaysia and the UK.

Your application will include the following questions:

• How many years' experience do you have as a Security Operations Centre Engineer?
• Do you have Root Cause Analysis experience?