Security Analyst 1

Ensign Services; Kuala Lumpur; On-site; MYR 36,000 - 60,000; Full time

Job summary

Ensign invites applications for a Security Operations Center Analyst in Kuala Lumpur. You will act as incident first responder for a 24/7 SOC, monitor security sensors, perform vulnerability management, and investigate events across a large set of devices.

You will work with threat intelligence, develop incident response workflows, and liaise with customers to identify root causes and recommend mitigations. Fresh graduates are welcome and may undergo extensive on-the-job training.

Qualifications

• Diploma/Degree in Information System/Information Security from a recognized institution.
• 1 year of working experience in networking environment.
• Basic knowledge of network routing and switching fundamentals incl. MPLS.
• Basic understanding of operating systems, network architecture and design.
• Has understanding of network, server and application fundamentals and OSI protocols.
• Basic knowledge of encryption, key management and cryptology.
• Ability to plan and prioritize work and work with a team.
• Strong writing skills and ability to communicate with technical and executive staff.
• Fresh graduates are welcome and will receive extensive On-Job-Training and certification.

Responsibilities

• Act as Incident first responder for a 24/7 staffed SOC.
• Perform security monitoring, vulnerability management, data loss / policy violation prevention and threat hunting.
• Monitor security sensors and review logs to identify network anomalies or intrusions.
• Provide analysis from monitoring, research and assessment of security log data from many devices.
• Escalate security incidents using established policies in a timely manner.
• Liaise with customers on intrusions, identify root cause and recommend mitigations.
• Perform initial analysis of security events, network traffic, and logs.
• Assist with development of incident response plans, workflows and SOPs.
• Work with threat intelligence analysts to convert intelligence into detection.
• Monitor MDR platforms and perform analysis for notifications.
• Perform response actions on MDR platforms per client workflows.
• Act as liaison for configured alerts to monitor sensor/tool performance.
• Fulfil Change Requests and Service Requests and respond to inquiries regarding Incident Management.

Skills

MPLS knowledge

ITIL

CCNA

CEH

Writing skills

Education

Diploma/Degree in Information System/Information Security

Job description

Ensign is hiring !

L1

Responsibilities

• Act as Incident first responder for a 24/7 staffed SOC
• Perform security monitoring, vulnerability management, data loss / policy violation prevention and threat hunting
• Monitor security sensors and review logs to identifynetwork anomaliesor intrusions
• Provide analysisfrom monitoring, research and assessmentof security log data from a large number of heterogeneous security devices
• Escalate security incidents using established policies and proceduresin a timely manner
• Liaise with Ensign customers on security intrusions, identifying root cause and recommend mitigation step(s)/ remedial action(s)
• Perform initial analysis of security events, network traffic, and logs
• Assist with the development of incident response plans, workflows, and SOPs
• Work directly with threat intelligence analysts to convert intelligence into useful detection
• Monitoring the Managed Endpoint and Detection Response (MDR) platforms and performing analysis for notifications
• Performing Response action on Managed Endpoint and Detection Response (MDR) platforms based on standardize workflow and agreement with clients.
• Act as a liaison party for configured alerts to monitor performance of security sensors and tools
• Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management

Requirements

• Diploma/Degree in Information System/Information Security from a recognized institution
• 1 year of working experience in networking environment
• Basic, yet sound knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS)
• Basic, yet sound technical understanding of operating systems, network architecture and design
• Has understanding of network, server and application fundamentals, and its protocols within OSI layer framework
• Basic, yet sound knowledge of encryption, key management and cryptology
• Proven ability to plan and prioritize work, both their own and that of project team
• Sound understanding of organizational issues and challenges. Able to work effectively with participants at all levels in an organization
• Ability to analyze problems and determine root causes, generating alternatives, evaluating and selecting alternatives and implementing solutions
• Possess excellent writing skills and the ability to communicate to teammates as well as technical and executive level staff
• Results Oriented
• Fresh graduates with passion for cyber security are welcome and they will be enrolled in an extensive On-Job-Training (OJT) and training for professional certification

Preferred Skills /Qualities

• Professional information technology/security certifications such as ITIL, CCNA and CEH will be preferred but related qualification (i.e. GCIA, CISSP etc.) will be an advantage