Lead Analyst, Digital Security

AIA; Sepang; On-site; MYR 80,000 - 120,000; Full time

Job summary

AIA is seeking a Security Platform Operations & Engineering Specialist to operate and enhance enterprise security platforms (SIEM, SOAR, Data Security). The role focuses on platform stability, automation, and regulatory alignment, with responsibilities across incident management and stakeholder engagement.

You'll work on integrations, automation playbooks, and contribute to audit readiness while supporting platform deployments, upgrades, and compliance efforts.

Qualifications

• 2–3 years in information security, security engineering, or security platform operations.
• Experience supporting enterprise-scale security platforms in production.
• Familiarity with audit, compliance, or regulatory requirements is preferred.

Responsibilities

• Operate and maintain enterprise security platforms (SIEM, SOAR, Data Security).
• Monitor health, availability, performance, and capacity.
• Perform maintenance, upgrades, and patch management.
• Automate routine security tasks and integrations with other systems.
• Support audit activities and provide evidence and documentation.

Skills

SIEM/SOAR ops

Scripting (Python/PowerShell)

Cloud & Azure

Kubernetes

Automation

Incident management

Education

Bachelor's degree in CS/IT or related field

Tools

Google Chronicle

Splunk

QRadar

ServiceNow

REST APIs

Job description

At AIA we’ve started an exciting movement to create a healthier, more sustainable future for everyone.

As pioneering innovators for over 100 years, we’re now transforming our organisation to be faster, simpler and more connected. Because we want to be even better equipped to develop digital solutions and experiences that help more people live Healthier, Longer, Better Lives.

To get there, we need people with tech/digital/analytics expertise and passion to help develop positive, sustainable change through digitally enhanced experiences that will impact the lives of millions of people and create a healthier future for everyone.

If you believe in developing a better tomorrow, read on.

About the Role

The Security Platform Operations & Engineering Specialist is responsible for the operation, maintenance, enhancement, and support of enterprise security platforms, including SIEM, SOAR, and Data Security solutions. This role combines platform operations, engineering, automation, incident management, compliance support, and stakeholder engagement responsibilities. The successful candidate will play a key role in ensuring security platforms remain stable, scalable, compliant, and aligned with business and regulatory requirements

Key Responsibilities

• Manage day-to-day operations and administration of enterprise security platforms, including SIEM, SOAR, and Data Security platforms.
• Monitor platform health, service availability, performance, and capacity utilization.
• Perform proactive platform maintenance, system tuning, and health checks.
• Support platform deployment, upgrades, migrations, and patch management activities.
• Design, implement, and maintain integrations between security platforms and enterprise systems.
• Develop automation playbook to automate routine security tasks such as threat intelligence lookups, alert enrichment, incident response processes, and vulnerability scanning.
• Support onboarding of new data sources, use cases, and security technologies.
• Create and maintain technical documentation, operational manual, and standard operating procedure.
• Troubleshoot and resolve platform, infrastructure, integration, and data ingestion issues.
• Coordinate with internal teams, vendors, and external partners to resolve complex technical problems.
• Continuously track, monitor, and follow up on Incidents, Changes, and Problems throughout their lifecycle.
• Conduct root cause analysis (RCA) and implement corrective and preventive actions.
• Participate in major incident management activities and service restoration efforts.
• Partner with Internal Audit teams to support audit activities.
• Provide audit evidence, operational documentation, system records, and technical explanations when required.
• Support remediation activities arising from audit findings and compliance assessments.
• Ensure security platforms operate in accordance with organizational policies, standards, and regulatory requirements.
• Manage and fulfill user requests within agreed service levels.
• Provide technical support and consultation to BU security, infrastructure, and application teams.
• Collaborate with BU stakeholders on platform enhancements and operational improvements.
• Participate in project delivery and platform transformation initiatives.

Required Qualifications

Experience

• At least 2-3 years of experience in Information Security, Security Engineering, Security Platform Operations, System Administration, or Infrastructure Operations.
• Experience supporting enterprise-scale security platforms in production environments.
• Experience working within Incident, Problem, and Change Management processes.
• Experience supporting audit, compliance, or regulatory requirements is preferred.

Technical Skills

Security Platforms

• Hands-on experience with SIEM technologies, in-depth knowledge of Google SecOps (Chronicle) is highly preferred.
• Experience with SOAR technologies and security automation workflows, e.g. Chronicle, Splunk SOAR.
• Understanding of security monitoring architecture and log management concepts.

Infrastructure & Cloud

• Strong knowledge of Linux and Windows administration.
• Experience with Microsoft Azure services and cloud operations.
• Hands-on Kubernetes (K8S) administration and troubleshooting experience.
• Understanding of networking fundamentals, including DNS, TCP/IP, HTTP/HTTPS, Syslog, and security-related protocols.

Automation & Integration

• Experience in Python and/or PowerShell scripting.
• Experience with REST APIs based system integrations.
• Experience automating operational tasks and platform management activities.
• Experience leveraging AI-powered tools (e.g., Microsoft Copilot) to improve operational efficiency, automate repetitive tasks, accelerate troubleshooting, enhance documentation quality, and support platform engineering activities.

Preferred Qualifications

• Experience with:
  • Google SecOps, Splunk, QRadar SIEM & SOAR
  • BigID Data Discovery
  • ServiceNow
  • Azure Administrator Operation
  • Kubernetes Platforms
• Professional certifications such as:
  • Security Certifications such as CISSP / CCSP.
  • Azure Certifications such as SC-500, AZ-104
  • CKA - Certified Kubernetes Administrator
  • ITIL v4 Foundation Certification.

Key Competencies

• Strong troubleshooting and analytical skills.
• Ability to work independently and manage multiple priorities.
• Proactively utilizes AI-powered tools to improve productivity, problem-solving, automation, and overall operational effectiveness.
• Strong ownership and accountability mindset.
• Excellent communication and stakeholder management skills.
• Ability to collaborate effectively across BU and cross-functional teams.
• Commitment to operational excellence and continuous improvement.

Build a career with us as we help our customers and the community live Healthier, Longer, Better Lives.

You must provide all requested information, including Personal Data, to be considered for this career opportunity. Failure to provide such information may influence the processing and outcome of your application. You are responsible for ensuring that the information you submit is accurate and up-to-date.