Security Analyst (Security & Intelligence Operations)

GXS Bank; Petaling Jaya; On-site; MYR 60,000 - 100,000; Full time

Job summary

Neo Services Sdn. Bhd. is seeking a Security Analyst to monitor, review and respond to alerts from the bank's security solutions.

This role sits within Security & Intelligence Operations and reports to the Regional Lead. You will investigate security incidents, prepare reports and maintain runbooks, using EDR, SIEM, SOAR and TIP. A background of 1–3 years in information security and familiarity with cloud platforms (AWS/GCP/Azure) is preferred; relevant certifications (ISC)2, SANS or OSCP are

Qualifications

• Minimum 1–3 years of information security experience.

Responsibilities

• Monitor, review and respond to alerts in accordance with SLA/SLO.
• Recommend triage actions and maintain runbooks and playbooks.
• Investigate and escalate security incidents based on severity within SLA/SLO.
• Communicate and document investigation progress, findings, and challenges.
• Collate, analyze and report security event metrics.
• Improve detection capabilities and stay current with threats.

Skills

Threat Detection

Threat Intelligence

Threat Hunting

Detection Engineering

Investigation Skills

Communication Skills

Education

(ISC)2

SANS

OSCP

Tools

EDR

SIEM

SOAR

TIP

Job description

Get To Know Our Team

Neo Services Sdn. Bhd. is a newly setup Shared Service Center, 100% subsidiary of GXS Bank Pte. Ltd., based in Singapore - the Grab-led Digital Bank approved by MAS to commence operations. We aim to leverage technology and innovation to serve the financial needs of the unserved and underserved individuals, and micro and small medium enterprises. We are driven by our shared purpose and passion to bring positive transformation to the banking industry.

Get To Know The Role

The Security Analyst is responsible for monitoring, reviewing and responding to alerts generated from the various security solutions in the Bank. This role will come under the Security & Intelligence Operations function, reporting to the Regional Lead (Security & Intelligence Operations).

Key Responsibilities

• Monitor, review and respond to alerts generated from the various security detection tools and case management systems in accordance with established service level agreements and objectives (SLA & SLO) .
• Recommend triage actions and maintenance of runbooks and playbooks.
• Investigate and elevate security incidents based on the severity level for each event/incident within SLA & SLO.
• Effectively communicate and document investigation progress, findings, opportunities and challenges.
• Collate, analyze and prepare reports on security event metrics.
• Assess, recommend, develop and finetune detection capabilities to improve the effectiveness of the various security programs in place
• Stay current with the latest cyber threats, attacks, and vulnerabilities.

Knowledge

• Relevant security or technical certifications will be advantageous including but not limited to (ISC)2, SANS, OSCP.
• Minimum 1-3 years of experience in an information security role and related experience.
• Broad understanding of IT security concepts and defense-in-depth practices.
• Familiarity with cloud technologies (e.g. AWS, GCP, Azure).

Skills

• Hands‑on experience in two or more of the following areas will be advantageous.
• Threat Detection & Monitoring
• Threat Intelligence Analysis
• Threat Hunting
• Detection Engineering
• Initial inquiry into problem statements/incident leads, analytical approach, hypothesis generation and testing with investigative security tools.
• Analytical and problem‑solving skills.
• Possess excellent verbal and written communication skills.
• Strong prioritization skills and attention to details.
• Experience in EDR, SIEM, SOAR, & TIP is required.
• Knowledge/experience in programming and scripting (python, bash or powershell) is advantageous.