Security Analyst 1

Ensign InfoSecurity; Kuala Lumpur; On-site; MYR 36,000 - 48,000; Full time

Benefits offered by this job

On-Job-Training

Professional certification training

Job summary

Ensign InfoSecurity in Kuala Lumpur seeks an Incident Responder for their 24/7 SOC team. This role involves monitoring security systems, managing incidents, and working with clients to strategize effective responses to threats.

Ideal candidates should hold a Diploma or Degree in Information Systems/Information Security, possess relevant networking experience, and demonstrate strong analytical and communication skills. Fresh graduates with a passion for cybersecurity are encouraged to apply and will receive extensive training.

Qualifications

• 1 year of working experience in a networking environment.
• Sound knowledge of network routing, switching, and security protocols.
• Proven ability to plan and prioritize work effectively.

Responsibilities

• Act as Incident first responder for a 24/7 staffed SOC.
• Monitor security sensors and review logs for anomalies.
• Liaise with customers on security incidents and recommend solutions.

Skills

Networking fundamentals

Incident management

Security monitoring

Threat hunting

Communication skills

Education

Diploma/Degree in Information System/Information Security

Job description

Responsibilities

• Act as Incident first responder for a 24/7 staffed SOC
• Perform security monitoring, vulnerability management, data loss / policy violation prevention and threat hunting
• Monitor security sensors and review logs to identify network anomalies or intrusions
• Provide analysis from monitoring, research and assessment of security log data from a large number of heterogeneous security devices
• Escalate security incidents using established policies and procedures in a timely manner
• Liaise with Ensign customers on security intrusions, identifying root cause and recommending mitigation step(s) / remedial action(s)
• Perform initial analysis of security events, network traffic, and logs
• Assist with the development of incident response plans, workflows, and SOPs
• Work directly with threat intelligence analysts to convert intelligence into useful detection
• Monitor the Managed Endpoint and Detection Response (MDR) platforms and perform analysis for notifications
• Perform Response action on Managed Endpoint and Detection Response (MDR) platforms based on standardized workflow and agreement with clients
• Act as a liaison party for configured alerts to monitor performance of security sensors and tools
• Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management Requirements

Qualifications

• Diploma/Degree in Information System/Information Security from a recognized institution
• 1 year of working experience in networking environment
• Basic, yet sound knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS)
• Basic, yet sound technical understanding of operating systems, network architecture and design
• Has understanding of network, server and application fundamentals, and its protocols within OSI layer framework
• Basic, yet sound knowledge of encryption, key management and cryptology
• Proven ability to plan and prioritize work, both their own and that of project team
• Sound understanding of organizational issues and challenges
• Ability to work effectively with participants at all levels in an organization
• Ability to analyze problems and determine root causes, generating alternatives, evaluating and selecting alternatives and implementing solutions
• Possess excellent writing skills and the ability to communicate to teammates as well as technical and executive level staff

Preferred Skills / Qualifications

• Professional information technology/security certifications such as ITIL, CCNA and CEH will be preferred but related qualification (i.e. GCIA, CISSP etc.) will be an advantage

Additional Information

Results Oriented Fresh graduates with passion for cyber security are welcome and they will be enrolled in an extensive On-Job-Training (OJT) and training for professional certification.

About Ensign InfoSecurity

Ensign InfoSecurity is the largest pure-play cybersecurity service provider in Asia. The company is headquartered in Singapore and specialises in cyber security advisory, assurance, management of advanced controls, monitoring, threat hunting, and incident response.