Security Analyst

Techstreet Malaysia; Sarawak; On-site; MYR 90,000 - 150,000; Full time

Job summary

Techstreet Malaysia is seeking a proactive IT Security Specialist to join our cyber risk team. You will monitor, analyse, and respond to security threats, working with IT Infrastructure, Customer Support and Application teams to protect our digital assets.

The role requires a Bachelor’s in IT/CS, 3+ years in security or related fields, and certifications such as CCNA, ITIL or Security+. Expect hands-on duties across SIEM, EDR/XDR, firewalls, and incident response, with occasional after-hours

Qualifications

• Bachelor’s degree in IT/CS or related discipline with at least 3 years in IT security.
• Master’s degree may be considered for the role.
• Active IT security certs (e.g., CCNA, ITIL, CompTIA Security+) preferred.

Responsibilities

• Monitor network traffic and logs; respond to security incidents.
• Ensure adherence to policies and standards; assist leadership with security posture.
• Coordinate risk assessment and incident management activities.

Skills

SIEM analysis

Threat monitoring

Incident response

Networking basics

Education

Bachelor’s degree in IT/CS

Master’s degree (advantage)

Tools

EDR/XDR

Firewall

MFA

VPN

Job description

The position is a technical support position. The position will be responsible for carrying duties involving various functions of Information Technology designated by the Manager, Infrastructure and Cybersecurity Risk; or Director, Information Technology – mainly responsible for monitoring, analysing, and responding to security threats and incidents to protect our organisation’s digital assets. The position will work closely with IT Infrastructure, Customer Support and Application teams to ensure the integrity, confidentiality, and availability of information systems.

Responsibilities

1) Technical Skills and Knowledge

• Act as the organisation's early warning system by continuously observing network traffic, analysing system logs, and managing Security Information and Event Management (SIEM) tools to spot suspicious activities and filter out false alarms before a potential threat escalates.
• Bridge the gap between technical systems and human behaviour by ensuring the organisation’s adherence to legal frameworks and industry standards (such as NIST CFS), documenting the security posture for leadership, and conducting ongoing training to help employees recognise and avoid common threats such as phishing.
• Proactively hunt for systemic weaknesses by conducting regular network scanning, coordinating simulated penetration tests, and enforcing rigorous patch management to identify, assess, and prioritise technical risks before malicious actors can exploit them.
• Build and maintain robust technical defences installing, configuring, and managing essential security infrastructure – including firewalls, endpoint protection (EDR), and strict identity access controls, while ensuring all new IT projects are designed securely from the ground up.

2) Policy and Planning

• Assist and support the Manager, Infrastructure and Cybersecurity Risk to implement and to ensure compliance with all the policies relating to Information Technology.

3) Resource Management

• Establish and maintain materials and equipment storage.
• Ensure system compatibility, maintenance of the organizations Standard Operating Environment.
• Specify items required and obtain quotations as necessary.
• Maintain good relationship with vendors.

5) Reports

• Prepare reports and provide accurate information as and when required by the Management.

Requirements

• Bachelor’s degree in Information Technology (IT), Computer Science or other related discipline from a recognised institution with at least three (3) years relevant work experience.
• Master’s degree holder can be considered.
• Possess at least one (1) relevant IT certification(s) with active status in either system, network, project management, information security, operations, or equivalent. (e.g; CCNA, ITIL, CompTIA Security+, or equivalent)
• At least three (3) years of relevant working experience in two of the following domains: deployment, configuration, support, cybersecurity, network security, project management in a medium to large enterprise with a proven record of providing quality service.
• Experience in assisting or performing risk assessment or incident response and management.
• Familiar with current security technologies and keen interest in learning within security domain.
• Familiar with support and manage the Endpoint Detection and Responses (EDR/XDR), email security gateway, Firewall, IPS,VPN,DLP,MFA, etc.
• Handle, validate and investigate Security Events (Intrusions/Malicious Activity/Security Events).
• Ability to perform the tasks assigned under pressure and short notice. Ready to work outside of normal office hours when required.
• Ability to handle confidential and sensitive information responsibly.
• Self-motivated, demonstrating a high level of initiative, assertiveness, versatility and flexibility.
• Experience in responding to all audit enquires pertaining to IT security matters.
• Demonstrates up-to-date knowledge of the current cyber security trends, threats, solutions and tools.
• Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, and common security elements.