Operations Support Engineer

Agensi Pekerjaan CS MALAYSIA Sdn Bhd; Cyberjaya; On-site; MYR 70,000 - 120,000; Full time

Job summary

Agensi Pekerjaan CS MALAYSIA Sdn Bhd is seeking a Security Operations Engineer (L2) to monitor, analyze, and respond to security incidents. You will perform VAPT, Security Posture reviews, and threat hunting, with on-site support as needed.

Light travel may be required for cybersecurity services. The role requires 2–4 years in SOC/IR, strong SIEM knowledge, and hands-on experience with vulnerability scanners and pentest tools.

Qualifications

• 2–4 years experience in SOC, Incident Response or Security Engineering.
• Strong knowledge of SIEM platforms (Elastic, Wazuh, Graylogs, Syslogs API).
• Experience with vulnerability scanners (Nessus, OpenVAS, Qualys) and pentest tools (Burp Suite, Metasploit, Nmap, Kali Linux).
• Understanding of ISO27001, NIST CSF, CIS, MITRE ATT&CK, PDPA Malaysia.
• Strong documentation and analytical skills.

Responsibilities

• Monitor and triage alerts from SIEM, IDS/IPS, firewalls, and EDR/XDR.
• Perform L2 analysis and correlation to identify threats and compromises.
• Escalate incidents to L3/IR with detailed notes.
• Conduct threat hunting and anomaly detection using SIEM and threat intel.
• Support IR process: containment, eradication, recovery, reporting.
• Provide guidance to L1 in triage and incident mgmt until case closed.
• Create, edit, review monthly reports.
• Perform VAPT when assigned.
• Collaborate with customer, IT and DevOps to close vulnerabilities and harden systems.
• Conduct Security Posture & Compliance Assessments for clients.

Skills

Threat analysis

Incident response

Security monitoring

Documentation

Education

Bachelor's Degree in Cybersecurity or related field

Tools

Elastic

Wazuh

Graylogs

Syslogs API

Nessus

OpenVAS

Qualys

Burp Suite

Metasploit

Nmap

Kali Linux

Job description

The Security Operations Engineer (L2) is responsible for advanced monitoring, analysis and response to security incidents, alongside conducting technical security assessments such as Vulnerability Assessment and Penetration Testing (VAPT), Security Posture Review and Threat Hunting. The position required to perform on-site troubleshooting and deployment for cybersecurity related services when needed with light travelling expected.

Role & Responsibilities

• Monitor and triage alerts generated by SIEM, IDS/IPS, firewalls, and EDR/XDR platforms.
• Perform L2 analysis and correlation of security events to identify threats and potential compromises.
• Escalate confirmed incidents to L3/Incident Response Team with detailed investigation notes.
• Conduct threat hunting and anomaly detection using SIEM and threat intel feeds.
• Support the Incident Response (IR) process: containment, eradication, recovery, and post-incident reporting.
• Provide necessary support and guidance to L1 in triage and incident management until case closed.
• Create, edit, and review monthly reports.
• Perform Vulnerability Assessment & Penetration Testing (VAPT) when assigned.
• Collaborate with customer, technical, IT and DevOps teams to close vulnerabilities
• and improve system hardening.
• Conduct Security Posture & Compliance Assessment (SPA/CA) for clients against industry CSF and standards.
• Assist remediation assessment and verification.
• Report duty and important escalation to Operations manager and Head of Cybersecurity for high severity incident.

Requirements

• Bachelor’s Degree in Cybersecurity, Computer Science, or related field.
• 2–4 years’ experience in SOC, Incident Response, or Security Engineering.
• Strong knowledge of SIEM platforms (Elastic, Wazuh, Graylogs, Syslogs API)
• Experience with vulnerability scanners (Nessus, OpenVAS, Qualys) and penetration tools (Burp Suite, Metasploit, Nmap, Kali Linux).
• Understanding of frameworks: ISO 27001, NIST CSF, CIS, MITRE ATT&CK, PDPA Malaysia.
• Strong documentation and analytical skills.