Security Analyst

Techstreet Malaysia; Sarawak; Sur place; MYR 60 000 - 100 000; Plein temps

Résumé du poste

Techstreet Malaysia is seeking a technical security support professional to monitor, analyze, and respond to threats, protecting the organisation's digital assets. You will work with IT Infrastructure, Customer Support and Application teams to ensure confidentiality, integrity, and availability of information systems.

Responsibilities include monitoring network traffic with SIEM, conducting log analysis, patch management, and maintaining security controls such as firewalls, EDR/XDR, DLP, MFA,

Qualifications

• Bachelor’s degree in IT/CS from a recognised institution with 3+ years of experience.
• Master’s degree is a plus and can be considered.
• Relevant IT certification(s) with active status (e.g., CCNA, ITIL, CompTIA Security+).

Responsabilités

• Monitor, analyse, and respond to security threats and incidents to protect digital assets.
• Maintain security posture with SIEM, logs review, and ongoing employee training.
• Assist in risk assessment, incident response, and adherence to security standards.
• Manage security infrastructure including firewalls, EDR/XDR, VPN, DLP, and MFA.

Connaissances

SIEM

Threat monitoring

Incident response

Risk assessment

Networking basics

EDR/XDR

Firewall

VPN

MFA

Formation

Bachelor’s degree in Information Technology or Computer Science

Master’s degree holder considered

Outils

SIEM tools

EDR/XDR

Firewall

VPN

DLP

Description du poste

The position is a technical support position. The position will be responsible for carrying duties involving various functions of Information Technology designated by the Manager, Infrastructure and Cybersecurity Risk; or Director, Information Technology – mainly responsible for monitoring, analysing, and responding to security threats and incidents to protect our organisation’s digital assets. The position will work closely with IT Infrastructure, Customer Support and Application teams to ensure the integrity, confidentiality, and availability of information systems.

Responsibilities

1) Technical Skills and Knowledge

• - Act as the organisation's early warning system by continuously observing network traffic, analysing system logs, and managing Security Information and Event Management (SIEM) tools to spot suspicious activities and filter out false alarms before a potential threat escalates.
• - Bridge the gap between technical systems and human behaviour by ensuring the organisation’s adherence to legal frameworks and industry standards (such as NIST CFS), documenting the security posture for leadership, and conducting ongoing training to help employees recognise and avoid common threats such as phishing.
• - Proactively hunt for systemic weaknesses by conducting regular network scanning, coordinating simulated penetration tests, and enforcing rigorous patch management to identify, assess, and prioritise technical risks before malicious actors can exploit them.
• - Build and maintain robust technical defences installing, configuring, and managing essential security infrastructure – including firewalls, endpoint protection (EDR), and strict identity access controls, while ensuring all new IT projects are designed securely from the ground up.

2) Policy and Planning

• - Assist and support the Manager, Infrastructure and Cybersecurity Risk to implement and to ensure compliance with all the policies relating to Information Technology.

3) Resource Management

• - Establish and maintain materials and equipment storage.
• - Ensure system compatibility, maintenance of the organizations Standard Operating Environment.
• - Specify items required and obtain quotations as necessary.
• - Maintain good relationship with vendors.

5) Reports

• - Prepare reports and provide accurate information as and when required by the Management.

Requirements

• - Bachelor’s degree in Information Technology (IT), Computer Science or other related discipline from a recognised institution with at least three (3) years relevant work experience.
• - Master’s degree holder can be considered.
• - Possess at least one (1) relevant IT certification(s) with active status in either system, network, project management, information security, operations, or equivalent. (e.g; CCNA, ITIL, CompTIA Security+, or equivalent)
• - At least three (3) years of relevant working experience in two of the following domains: deployment, configuration, support, cybersecurity, network security, project management in a medium to large enterprise with a proven record of providing quality service.
• - Experience in assisting or performing risk assessment or incident response and management.
• - Familiar with current security technologies and keen interest in learning within security domain.
• - Familiar with support and manage the Endpoint Detection and Responses (EDR/XDR), email security gateway, Firewall, IPS,VPN,DLP,MFA, etc.
• - Handle, validate and investigate Security Events (Intrusions/Malicious Activity/Security Events).
• - Ability to perform the tasks assigned under pressure and short notice. Ready to work outside of normal office hours when required.
• - Ability to handle confidential and sensitive information responsibly.
• - Self-motivated, demonstrating a high level of initiative, assertiveness, versatility and flexibility.
• - Experience in responding to all audit enquires pertaining to IT security matters.
• - Demonstrates up-to-date knowledge of the current cyber security trends, threats, solutions and tools.
• - Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, and common security elements.