Lead Analyst, Digital Security

AIA Digital+ Malaysia; Kuala Lumpur; On-site; MYR 90,000 - 160,000; Full time

Job summary

AIA Digital+ Malaysia in Kuala Lumpur seeks a Cybersecurity Platform Management Engineer to oversee day-to-day operations of enterprise security platforms, including SIEM, SOAR, and data security tools. You will monitor health, ensure service availability, and coordinate deployments, upgrades, and patch management.

You will design integrations, develop automation playbooks for threat intel lookups and incident response, onboard new data sources, document procedures, and troubleshoot platform,

Qualifications

• Hands-on experience with SIEM technologies (Chronicle preferred).
• Experience with SOAR technologies and security automation workflows.

Responsibilities

• Manage day-to-day operations and administration of enterprise security platforms, including SIEM, SOAR, and Data Security platforms.
• Monitor platform health, service availability, performance, and capacity utilization
• Perform proactive platform maintenance, system tuning, and health checks
• Support platform deployment, upgrades, migrations, and patch management activities
• Design, implement, and maintain integrations between security platforms and enterprise systems
• Develop automation playbooks to automate routine security tasks such as threat intelligence lookups, alert enrichment, incident response processes, and vulnerability scanning
• Support onboarding of new data sources, use cases, and security technologies
• Create and maintain technical documentation, operational manual, and standard operating procedure
• Troubleshoot and resolve platform, infrastructure, integration, and data ingestion issues
• Coordinate with internal teams, vendors, and external partners to resolve complex technical problems

Skills

SIEM experience

SOAR experience

Linux administration

Windows administration

Kubernetes administration

Python scripting

PowerShell scripting

Azure cloud operations

Threat intelligence workflows

Tools

Google Chronicle

Splunk SOAR

Kubernetes

Job description

Play a major role in the Digital Security Team as a Cybersecurity Platform management Engineer, managing day-to-day operations and administration of enterprise security platforms, including SIEM, SOAR, and Data Security platforms.

Key responsibilities

Manage day-to-day operations and administration of enterprise security platforms, including SIEM, SOAR, and Data Security platforms

Monitor platform health, service availability, performance, and capacity utilization

Perform proactive platform maintenance, system tuning, and health checks

Support platform deployment, upgrades, migrations, and patch management activities

Design, implement, and maintain integrations between security platforms and enterprise systems

Develop automation playbook to automate routine security tasks such as threat intelligence lookups, alert enrichment, incident response processes, and vulnerability scanning

Support onboarding of new data sources, use cases, and security technologies

Create and maintain technical documentation, operational manual, and standard operating procedure

Troubleshoot and resolve platform, infrastructure, integration, and data ingestion issues

Coordinate with internal teams, vendors, and external partners to resolve complex technical problems

About you

At least 3-4 years of experience in Information Security, Security Engineering, Security Platform Operations, System Administration, or Infrastructure Operations

Experience supporting enterprise-scale security platforms in production environments

Experience working within Incident, Problem, and Change Management processes

Hands-on experience with SIEM technologies, in-depth knowledge of Google SecOps (Chronicle) is highly preferred

Experience with SOAR technologies and security automation workflows, e.g. Chronicle, Splunk SOAR

Understanding of security monitoring architecture and log management concepts

Strong knowledge of Linux and Windows administration

Experience with Microsoft Azure services and cloud operations

Hands-on Kubernetes (K8S) administration and troubleshooting experience

Experience in Python and/or PowerShell scripting

AIA Digital+ Malaysia (AIA IT (M) Sdn. Bhd. (202201010550)(1456247-A)) is a technology, digital and analytics innovation hub dedicated to powering AIA to be more efficient, connected and innovative as it fulfils its Purpose to help millions of people across Asia-Pacific live Healthier, Longer, Better Lives.

AIA Digital+ Malaysia (AIA IT (M) Sdn. Bhd. (202201010550)(1456247-A)) is a technology, digital and analytics innovation hub dedicated to powering AIA to be more efficient, connected and innovative as it fulfils its Purpose to help millions of people across Asia-Pacific live Healthier, Longer, Better Lives.