L2 SOC Lead: Microsoft Sentinel & IR Expert

Neuron Solutions Sdn. Bhd.; Kuala Lumpur; Sur place; MYR 100 000 - 190 000; Plein temps

Résumé du poste

Neuron Solutions Sdn. Bhd. seeks an L2 SOC Analyst/Lead to oversee daily SOC shifts, monitor security alerts, and drive incident response using Microsoft Sentinel and CrowdStrike Falcon EDR. You will guide Tier 1 analysts, review escalations, and ensure adherence to SOC processes.

The role requires 4-5 years in cyber security operations, strong knowledge of SIEM/EDR tooling, and experience with NIST/ISO controls. Occasional collaboration with stakeholders is expected.

Qualifications

• Bachelor's degree in Cyber Security, Information Technology, or related field.
• 4-5 years of cyber security operations experience, including 3-4 years in Tier 2 SOC or IR roles.
• Hands-on Microsoft Sentinel experience: KQL, analytics rules, log onboarding, detection tuning.
• Experience with CrowdStrike Falcon EDR: alert triage, IOC management, detection rules.
• Knowledge of Fortinet FortiGate and network security monitoring.

Responsabilités

• Lead daily SOC shift operations and oversee Tier 1 analysts.
• Monitor security alerts and manage incident escalations within SLAs.
• Triage, investigate, and escalate threats using SIEM and EDR tools.
• Coordinate incident tracking, ticket prioritisation, and workload distribution.
• Provide guidance to Tier 1 analysts and validate investigations.
• Prepare incident reports, shift handover summaries, and security updates.

Connaissances

SOC operations

Tier 2 SOC

Incident response

Threat hunting

KQL queries

Detection tuning

Policy development

Team leadership

Formation

Bachelor's degree in Cyber Security, Information Technology, or related field

Outils

Microsoft Sentinel

CrowdStrike Falcon EDR

Fortinet FortiGate

ITSM platforms

Description du poste

Neuron Solutions Sdn. Bhd. seeks an L2 SOC Analyst/Lead to oversee daily SOC shifts, monitor security alerts, and drive incident response using Microsoft Sentinel and CrowdStrike Falcon EDR. You will guide Tier 1 analysts, review escalations, and ensure adherence to SOC processes.

The role requires 4-5 years in cyber security operations, strong knowledge of SIEM/EDR tooling, and experience with NIST/ISO controls. Occasional collaboration with stakeholders is expected.