L2 SOC -Microsoft Sentinel

Oxydata Software Sdn Bhd; Petaling Jaya; Hybrid; MYR 120,000 - 180,000; Part time

Benefits offered by this job

Hybrid work arrangement

Job summary

Oxydata Software Sdn Bhd in Malaysia is seeking a Senior Security Engineer specializing in Microsoft Sentinel to support enterprise cybersecurity operations. The role requires at least 3 years of hands-on SOC experience and deep knowledge of Microsoft Sentinel, KQL, and Defender.

You will monitor alerts, develop threat-hunting queries, perform triage and remediation, investigate phishing incidents, and map activities to MITRE ATT&CK.

Qualifications

• Minimum 3 years hands-on SOC experience.
• Strong hands-on experience with Microsoft Sentinel SIEM.
• Practical experience with Microsoft Defender and threat hunting.
• Proven experience in security incident response and phishing analysis.

Responsibilities

• Monitor, analyze, and investigate security alerts using Microsoft Sentinel SIEM.
• Develop and execute KQL queries for threat hunting and investigations.
• Perform security incident triage, analysis, containment, remediation, and escalation.
• Investigate phishing incidents including suspicious emails, URLs and IOCs.
• Manage security incidents and ensure resolution within SLAs.
• Map incidents to MITRE ATT&CK tactics, techniques, and procedures (TTPs).
• Apply NIST Cybersecurity Framework principles in SOC operations.
• Support Microsoft Defender, SIEM architecture, and monitoring tools.
• Work with EDR, IDS/IPS, firewalls, and endpoint security solutions.

Skills

SOC experience

Microsoft Sentinel

Threat hunting

Incident response

Tools

KQL

Microsoft Defender

Job description

Senior Security Engineer – Microsoft Sentinel

• Location: Oasis Square, Ara Damansara, Selangor
• Employment Type: 1-Year Contract (Renewable, with potential permanent conversion)
• Work Arrangement: Hybrid – 3 Days Office / 2 Days Work From Home
• Working Hours: 7:00 AM – 4:00 PM
• Joining Availability: Immediate to 45 Days

Important: Open to Local Malaysian Candidates Only | No Visa Sponsorship Available

Job Summary

We are looking for an experienced Senior Security Engineer – Microsoft Sentinel to support enterprise cybersecurity operations.

The ideal candidate must have a minimum of 3 years of hands‑on Security Operations Center (SOC) experience, with strong technical expertise in Microsoft Sentinel, KQL, Microsoft Defender, incident response, and threat hunting.

Key Responsibilities

• Monitor, analyze, and investigate security alerts using Microsoft Sentinel SIEM.
• Develop and execute KQL queries for threat hunting, security monitoring, and incident investigations.
• Perform security incident triage, analysis, containment, remediation, and escalation.
• Investigate phishing incidents, including suspicious emails, URLs, attachments, and Indicators of Compromise (IOCs).
• Manage security incidents and ensure resolution within defined SLAs.
• Map security incidents to MITRE ATT&CK tactics, techniques, and procedures (TTPs).
• Apply NIST Cybersecurity Framework principles in daily SOC operations.
• Support Microsoft Defender, SIEM architecture, security integrations, and monitoring tools.
• Work with EDR, IDS/IPS, firewalls, and endpoint security solutions.
• Identify opportunities to improve SOC efficiency through AI and security automation.

Requirements

• Minimum 3 years of hands‑on SOC experience – Mandatory.
• Strong hands‑on experience with Microsoft Sentinel SIEM and KQL – Mandatory.
• Practical experience with Microsoft Defender and threat hunting.
• Proven experience in security incident response, investigation, and phishing analysis.
• Good understanding of SIEM architecture and Microsoft security technologies.
• Familiarity with NIST Cybersecurity Framework and MITRE ATT&CK.
• Experience with EDR, IDS/IPS, firewalls, and endpoint protection.
• Ability to handle security incidents within defined SLAs.
• Strong analytical, troubleshooting, and communication skills.
• Knowledge of AI and automation in SOC operations is an added advantage.
• Must be available to join within 45 days.
• Open to Malaysian citizens only. No visa sponsorship is provided.

What We Offer

• Opportunity to work on a large-scale enterprise cybersecurity project.
• Exposure to Microsoft Sentinel, Microsoft Defender, and enterprise security technologies.
• Hybrid working arrangement (3 Days Office / 2 Days WFH).
• Renewable contract with potential permanent conversion, subject to business requirements and performance.

Company Information

We are local 100% Malaysian‑owned MSC status company established in 2006 serving ASEAN region. Our core competencies are in IT Managed Services, Dev/Ops, Outsourcing, Analytics development services, and Microsoft Platform development such as SharePoint, Power Platform, Dynamics CRM, and .NET/Mobile Application development. We help our clients to realize their results through digital transformation using our innovative IT services and software solutions.