Level 2 SOC Analyst - MSSP Incident Response

Ensign InfoSecurity; Kuala Lumpur; On-site; MYR 70,000 - 110,000; Full time

Job summary

Ensign InfoSecurity is seeking a Level 2 Security Analyst to operate in a fast-paced MSSP environment. You will serve as an escalation point for Tier 1 analysts, conducting in-depth investigations across multiple client environments.

You will guide incident response, enhance detection capabilities, and ensure accurate, timely actions while maintaining documentation and compliance with client SLAs.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, CS or related field.
• 2–4 years in a Security Operations Center or similar cybersecurity environment.
• Experience in an MSSP or multi-tenant environment is highly desirable.
• Certifications such as CompTIA Security+, CySA+, GIAC, CEH are preferred.

Responsibilities

• Analyze and respond to escalated alerts from Tier 1 analysts across multiple clients.
• Conduct in-depth investigations using SIEM, EDR, NDR, firewall logs, and other security tools.
• Perform malware analysis, log correlation, and network traffic analysis to identify attack vectors.
• Execute containment, eradication, and recovery procedures using predefined runbooks and playbooks.
• Escalate and coordinate with Level 3 analysts or incident response teams for high-severity incidents.
• Provide technical guidance and mentoring to Tier 1 analysts.
• Identify gaps in detection capabilities and recommend improvements in rules, tuning, and alerts.
• Support proactive threat hunting initiatives based on IOCs, TTPs, and threat intelligence.

Skills

Analytical thinking

Communication skills

Multitasking

Customer focus

Team collaboration

Education

Bachelor’s degree in Cybersecurity, IT or CS

2-4 years in SOC or similar

Tools

SIEM

EDR

SOAR

Case management

Scripting (Python/PowerShell)

Job description

Ensign InfoSecurity is seeking a Level 2 Security Analyst to operate in a fast-paced MSSP environment. You will serve as an escalation point for Tier 1 analysts, conducting in-depth investigations across multiple client environments.

You will guide incident response, enhance detection capabilities, and ensure accurate, timely actions while maintaining documentation and compliance with client SLAs.