Lead Analyst, Digital Security

AIA Digital+; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

AIA Digital+ in Malaysia is seeking a Cybersecurity Platform Management Engineer to lead day-to-day operations and administration of enterprise security platforms, including SIEM, SOAR, and Data Security platforms. You will monitor health, performance, and capacity, and drive maintenance and upgrades.

The role requires hands-on experience with SIEM technologies, Kubernetes, Linux/Windows, Azure, and scripting in Python or PowerShell, plus strong collaboration with internal teams and vendors to

Qualifications

• 3-4 years of experience in Information Security, Security Engineering, or related fields.
• Experience supporting enterprise-scale security platforms in production.
• Experience with Incident, Problem, and Change management processes.
• Hands-on with SIEM technologies; knowledge of Google SecOps Chronicle preferred.
• Experience with SOAR technologies and security automation workflows.

Responsibilities

• Manage day-to-day operations and administration of security platforms (SIEM, SOAR, Data Security).
• Monitor platform health, service availability, performance, and capacity.
• Perform proactive maintenance, tuning, and health checks.
• Support deployments, upgrades, migrations, and patching.
• Design, implement, and maintain integrations with enterprise systems.
• Develop automation playbooks for threat intel lookups, alert enrichment, and incident response.
• Onboard new data sources and security technologies.
• Create technical documentation and runbooks.
• Troubleshoot platform, infrastructure, and data ingestion issues.

Skills

SIEM technologies

SOAR technologies

Kubernetes

Python scripting

PowerShell scripting

Google Chronicle

Splunk SOAR

Linux administration

Windows administration

Azure

Security monitoring

Incident/Problem/Change management

Tools

Chronicle

Splunk

SIEM

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

Play a major role in the Digital Security Team as a Cybersecurity Platform management Engineer, managing day-to-day operations and administration of enterprise security platforms, including SIEM, SOAR, and Data Security platforms.

Key responsibilities

• Manage day-to-day operations and administration of enterprise security platforms, including SIEM, SOAR, and Data Security platforms
• Monitor platform health, service availability, performance, and capacity utilization
• Perform proactive platform maintenance, system tuning, and health checks
• Support platform deployment, upgrades, migrations, and patch management activities
• Design, implement, and maintain integrations between security platforms and enterprise systems
• Develop automation playbook to automate routine security tasks such as threat intelligence lookups, alert enrichment, incident response processes, and vulnerability scanning
• Support onboarding of new data sources, use cases, and security technologies
• Create and maintain technical documentation, operational manual, and standard operating procedure
• Troubleshoot and resolve platform, infrastructure, integration, and data ingestion issues
• Coordinate with internal teams, vendors, and external partners to resolve complex technical problems

About you

• At least 3-4 years of experience in Information Security, Security Engineering, Security Platform Operations, System Administration, or Infrastructure Operations
• Experience supporting enterprise-scale security platforms in production environments
• Experience working within Incident, Problem, and Change Management processes
• Hands‑on experience with SIEM technologies, in-depth knowledge of Google SecOps (Chronicle) is highly preferred
• Experience with SOAR technologies and security automation workflows, e.g. Chronicle, Splunk SOAR
• Understanding of security monitoring architecture and log management concepts
• Strong knowledge of Linux and Windows administration
• Experience with Microsoft Azure services and cloud operations
• Hands‑on Kubernetes (K8S) administration and troubleshooting experience
• Experience in Python and/or PowerShell scripting