Security Analyst L1

Ensign Infosecurity; Shah Alam; On-site; MYR 47,000 - 87,000; Full time

Job summary

Ensign Infosecurity is seeking a 24/7 Incident Responder for its Malaysia operations in Shah Alam. You will handle real-time security events, monitor logs, and coordinate with clients.

The role emphasizes rapid incident analysis, escalation, and collaboration with threat intel and MDR platforms to strengthen client security postures.

Qualifications

• 1 year of working experience in networking environment.
• Basic knowledge of network routing and switching and MPLS.
• Understanding of OSI layers and network/server fundamentals.
• Familiarity with encryption, key management and cryptology.
• Ability to plan and prioritize work within a project team.
• Good written communication for teammates and executives.

Responsibilities

• Act as Incident first responder for a 24/7 staffed SOC.
• Perform security monitoring, vulnerability management and threat hunting.
• Monitor security sensors and review logs to identify anomalies or intrusions.
• Provide analysis from monitoring and research of security logs across devices.
• Escalate security incidents using established policies and procedures.
• Liaise with Ensign customers on intrusions and suggest mitigations.
• Perform initial analysis of security events, traffic and logs.
• Assist with developing incident response plans, workflows and SOPs.
• Work with threat intelligence analysts to convert intel into detections.
• Monitor MDR platforms and perform response actions per client agreements.
• Act as liaison for alerts to monitor sensor performance.
• Fulfil change requests and service inquiries related to Incident Management.

Skills

Networking experience

MPLS knowledge

OSI fundamentals

Encryption knowledge

Incident management

Technical writing

Education

Diploma/Degree in Information System/Information Security

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

• Act as Incident first responder for a 24/7 staffed SOC


• Perform security monitoring, vulnerability management, data loss / policy violation prevention and threat hunting


• Monitor security sensors and review logs to identifynetwork anomaliesor intrusions


• Provide analysisfrom monitoring, research and assessmentof security log data from a large number of heterogeneous security devices


• Escalate security incidents using established policies and proceduresin a timely manner


• Liaise with Ensign customers on security intrusions, identifying root cause and recommend mitigation step(s)/ remedial action(s)


• Perform initial analysis of security events, network traffic, and logs


• Assist with the development of incident response plans, workflows, and SOPs


• Work directly with threat intelligence analysts to convert intelligence into useful detection


• Monitoring the Managed Endpoint and Detection Response (MDR) platforms and performing analysis for notifications


• Performing Response action on Managed Endpoint and Detection Response (MDR) platforms based on standardize workflow and agreement with clients.


• Act as a liaison party for configured alerts to monitor performance of security sensors and tools


• Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management

Requirements

• Diploma/Degree in Information System/Information Security from a recognized institution


• 1 year of working experience in networking environment


• Basic, yet sound knowledge of network routing and switching fundamentals to include knowledge of Multiprotocol Layer Switching (MPLS)


• Basic, yet sound technical understanding of operating systems, network architecture and design


• Has understanding of network, server and application fundamentals, and its protocols within OSI layer framework


• Basic, yet sound knowledge of encryption, key management and cryptology


• Proven ability to plan and prioritize work, both their own and that of project team


• Sound understanding of organizational issues and challenges. Able to work effectively with participants at all levels in an organization


• Ability to analyze problems and determine root causes, generating alternatives, evaluating and selecting alternatives and implementing solutions


• Possess excellent writing skills and the ability to communicate to teammates as well as technical and executive level staff

Preferred Skills /Qualities

• Professional information technology/security certifications such as ITIL, CCNA and CEH will be preferred but related qualification (i.e. GCIA, CISSP etc.) will be an advantage

Other Special Working Conditions

• Able to perform 12-hour shift duties (2 days’ work with 2 off-days). Working hours: AM - 8:30am to 8:30pm; PM - 8:30pm to 8:30am. Shift patterns and duration may vary from time to time