Security Analyst

Ensign InfoSecurity; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Job summary

Ensign InfoSecurity in Kuala Lumpur is looking for a dedicated cybersecurity professional to analyze and respond to security incidents. The role involves investigating malware and phishing attacks and conducting root cause analysis.

The ideal candidate has a degree in a relevant field and certifications like CompTIA CySA+ or EC-Council ECIH, along with hands-on experience with SIEM tools like Splunk or QRadar.

Qualifications

• Degree in Cybersecurity or related field is essential.
• Relevant cybersecurity certifications are highly preferred.
• Experience with SIEM platforms and incident response practices.

Responsibilities

• Analyze security events escalated by L1 analysts.
• Investigate and respond to cyber threats and incidents.
• Collaborate with other teams to resolve incidents.

Skills

Cybersecurity analysis

Incident response

Root cause analysis

Threat intelligence

Mentorship

Education

Degree in Cybersecurity, Computer Science, or related field

CompTIA CySA+, EC-Council ECIH, GCIA, GCFA, GCIH certifications

Tools

Splunk

QRadar

LogRhythm

Job description

Key Responsibilities

• Perform in-depth analysis of security events escalated by L1 analysts to determine scope, impact, and appropriate response actions.
• Investigate and respond to security incidents, including malware infections, phishing attacks, unauthorized access, and other cybersecurity threats.
• Conduct root cause analysis and recommend remediation and preventive actions.
• Utilize threat intelligence feeds and tools to enhance the detection and investigation process.
• Collaborate with other IT/security teams to contain and resolve incidents.
• Maintain and improve incident response runbooks and playbooks.
• Assist in tuning and optimizing SIEM rules, correlation logic, and alerts to reduce false positives.
• Mentor and support L1 analysts to ensure consistent incident handling practices.
• Prepare incident reports and executive summaries for management or customers.
• Participate in red/blue team exercises or threat‑hunting activities as needed.

Education & Certification

• Degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Relevant certifications highly preferred: CompTIA CySA+, EC-Council ECIH, GCIA, GCFA, GCIH, etc.

Technical Skills

• Strong understanding of network protocols, log analysis, and cybersecurity frameworks.
• Hands‑on experience with SIEM platforms (e.g., Splunk, QRadar, LogRhythm).
• Familiarity with EDR/XDR tools, IDS/IPS, firewalls, and forensic tools.
• Ability to write and optimize detection rules and scripts.
• Knowledge of MITRE ATT&CK and threat‑modeling methodologies.

About Ensign InfoSecurity

Ensign InfoSecurity is the largest pure‑play cybersecurity service provider in Asia and is headquartered in Singapore. The company specialises in cybersecurity advisory, implementation and management of advanced controls, monitoring, threat hunting, and incident response, supported by in‑house research and development.