Security Analyst

Techstreet Malaysia; Sarawak; On-site; MYR 60,000 - 90,000; Full time

Job summary

Techstreet Malaysia is seeking a technical security-focused professional to monitor, analyze, and respond to cyber threats. You will work with IT Infrastructure, Customer Support and Application teams to protect digital assets and ensure information system integrity, confidentiality and availability.

The role requires hands-on experience with SIEM tools, network monitoring, and security infrastructure management, including EDR, firewalls, and access controls.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science or related field with at least 3 years of relevant work experience.
• At least one relevant IT certification (e.g., CCNA, ITIL, CompTIA Security+) with active status.
• Experience in risk assessment or incident response and management.

Responsibilities

• Act as the organisation's early warning system by monitoring network traffic and logs using SIEM tools to detect suspicious activities.
• Bridge between technical systems and policy by ensuring compliance with relevant standards and conducting security training.
• Lead regular network scanning and coordinate simulated penetration tests to identify and prioritise risks.
• Install, configure, and manage security infrastructure including firewalls and EDR solutions.
• Prepare reports for management and maintain the organization's security posture.

Skills

Cybersecurity

Threat Detection

Incident Response

Security Awareness

Education

Bachelor's degree in IT/CS

Master's degree acceptable

Tools

EDR/XDR

Firewall

IPS/VPN/DLP

Job description

The position is a technical support position. The position will be responsible for carrying duties involving various functions of Information Technology designated by the Manager, Infrastructure and Cybersecurity Risk; or Director, Information Technology – mainly responsible for monitoring, analysing, and responding to security threats and incidents to protect our organisation’s digital assets. The position will work closely with IT Infrastructure, Customer Support and Application teams to ensure the integrity, confidentiality, and availability of information systems.

Responsibilities

1) Technical Skills and Knowledge

• Act as the organisation's early warning system by continuously observing network traffic, analysing system logs, and managing Security Information and Event Management (SIEM) tools to spot suspicious activities and filter out false alarms before a potential threat escalates.
• Bridge the gap between technical systems and human behaviour by ensuring the organisation’s adherence to legal frameworks and industry standards (such as NIST CFS), documenting the security posture for leadership, and conducting ongoing training to help employees recognise and avoid common threats such as phishing.
• Proactively hunt for systemic weaknesses by conducting regular network scanning, coordinating simulated penetration tests, and enforcing rigorous patch management to identify, assess, and prioritise technical risks before malicious actors can exploit them.
• Build and maintain robust technical defences installing, configuring, and managing essential security infrastructure – including firewalls, endpoint protection (EDR), and strict identity access controls, while ensuring all new IT projects are designed securely from the ground up.

2) Policy and Planning

• Assist and support the Manager, Infrastructure and Cybersecurity Risk to implement and to ensure compliance with all the policies relating to Information Technology.

3) Resource Management

• Establish and maintain materials and equipment storage.
• Ensure system compatibility, maintenance of the organizations Standard Operating Environment.

4) Vendor Relationship Management

• Specify items required and obtain quotations as necessary.
• Maintain good relationship with vendors.

5) Reports

• Prepare reports and provide accurate information as and when required by the Management.

Requirements

• Bachelor’s degree in Information Technology (IT), Computer Science or other related discipline from a recognised institution with at least three (3) years relevant work experience.
• Master’s degree holder can be considered.
• Possess at least one (1) relevant IT certification(s) with active status in either system, network, project management, information security, operations, or equivalent. (e.g; CCNA, ITIL, CompTIA Security+, or equivalent)
• At least three (3) years of relevant working experience in two of the following domains: deployment, configuration, support, cybersecurity, network security, project management in a medium to large enterprise with a proven record of providing quality service.
• Experience in assisting or performing risk assessment or incident response and management.
• Familiar with current security technologies and keen interest in learning within security domain.
• Familiar with support and manage the Endpoint Detection and Responses (EDR/XDR), email security gateway, Firewall, IPS,VPN,DLP,MFA, etc.
• Handle, validate and investigate Security Events (Intrusions/Malicious Activity/Security Events).
• Ability to perform the tasks assigned under pressure and short notice. Ready to work outside of normal office hours when required.
• Ability to handle confidential and sensitive information responsibly.
• Self-motivated, demonstrating a high level of initiative, assertiveness, versatility and flexibility.
• Experience in responding to all audit enquires pertaining to IT security matters.
• Demonstrates up-to-date knowledge of the current cyber security trends, threats, solutions and tools.
• Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, and common security elements.

Required Skills

Cybersecurity / InfoSec