Security Operations Center Analyst

EPAM Systems; Kuala Lumpur; Hybrid; MYR 60,000 - 96,000; Full time

Job summary

EPAM Systems Inc. is seeking a Security Operations Center Analyst in Kuala Lumpur with a hybrid work arrangement. The role focuses on monitoring and triaging alerts, investigating suspicious activity, and escalating confirmed threats to support incident response.

You will work with SIEM and SOAR platforms and contribute to detection tuning and threat intelligence. Responsibilities include monitoring across on-premises and cloud (AWS), producing investigation summaries, and maintaining SOC

Qualifications

• Hands-on experience in a Security Operations Center or enterprise security operations.
• Experience with alert monitoring, triage, investigation, false-positive identification and incident escalation.
• SIEM experience with Splunk, IBM QRadar, ArcSight, LogRhythm, Elastic Stack (ELK) or Wazuh.
• Knowledge of cybersecurity fundamentals including network security, firewalls, IDS/IPS, common attack techniques and detection methods.
• Familiarity with Windows and Linux logs plus network device logging and security event analysis.
• Understanding of endpoint security, identity and access monitoring, malware fundamentals and security hardening basics.
• Clear documentation skills to communicate incidents and findings to technical stakeholders.
• Shift flexibility to support coverage aligned to Sydney business hours.

Responsibilities

• Monitor SIEM and security tools for attacks, intrusions and suspicious activity across enterprise environments.
• Triage alerts, confirm severity, identify false positives and escalate validated threats.
• Run security investigations, analyze logs and gather evidence to support incident response.
• Use SIEM and SOAR platforms to support monitoring, investigation and response workflows.
• Monitor identity and access activity, including suspicious authentication and potential permission misuse.
• Support threat hunting, threat intelligence and detection tuning as needed.
• Produce investigation summaries and security reports for technical and non-technical stakeholders.
• Contribute to day-to-day Security Operations Center coverage and handovers to maintain continuity.

Skills

SOC experience

SIEM

Threat investigation

Windows logs

Linux logs

Endpoint security

Documentation

Triage and escalation

SOAR platforms

Tools

Splunk

IBM QRadar

ArcSight

LogRhythm

Elastic Stack

Wazuh

Cortex XSOAR

GuardDuty

Proofpoint

Palo Alto Wiz

Job description

We are seeking a Security Operations Center Analyst in Kuala Lumpur (Hybrid) to support security coverage aligned to Sydney business hours. You will monitor and triage alerts across on-prem and Amazon Web Services (AWS), investigate suspicious activity, escalate confirmed threats and help tune detections and SOAR playbooks. This is a hands-on operations role in a growing team.ResponsibilitiesMonitor SIEM and security tools for attacks, intrusions and suspicious activity across enterprise environmentsTriage alerts, confirm severity, identify false positives and escalate validated threatsRun security investigations, analyze logs and gather evidence to support incident responseUse SIEM and SOAR platforms to support monitoring, investigation and response workflowsMonitor identity and access activity, including suspicious authentication and potential permission misuseSupport threat hunting, threat intelligence and detection tuning as neededProduce investigation summaries and security reports for technical and non-technical stakeholdersContribute to day-to-day Security Operations Center coverage and handovers to maintain continuityRequirementsHands-on experience in a Security Operations Center, security monitoring or enterprise security operations environmentExperience with alert monitoring, triage, investigation, false-positive identification and incident escalationSIEM experience with platforms such as Splunk, IBM QRadar, ArcSight, LogRhythm, Elastic Stack (ELK) or WazuhKnowledge of cybersecurity fundamentals including network security, firewalls, intrusion detection and prevention systems (IDS/IPS), common attack techniques and detection methodsFamiliarity with Windows and Linux logs plus network device logging and security event analysisUnderstanding of endpoint security, identity and access monitoring, malware fundamentals and security hardening basicsClear documentation skills with the ability to communicate incidents and findings to technical stakeholdersShift flexibility to support coverage aligned to Sydney business hours. Shift patterns may change based on operational needsNice to haveExperience with endpoint detection and response platforms such as CrowdStrike Falcon Platform or equivalentExposure to SOAR tools such as Palo Alto Cortex XSOAR and cloud security services such as AWS GuardDutyFamiliarity with Cloud Security Posture Management tools such as Wiz and email security tools such as ProofpointWe offerBy choosing EPAM, you're getting a job at one of the most loved workplaces according to Newsweek 2021 & 2022&2023.Employee ideas are the main driver of our business. We have a very supportive environment where your voice mattersYou will be challenged while working side-by-side with the best talent globally. We work with top-notch technologies, constantly seeking new industry trends and best practicesWe offer a transparent career path and an individual roadmap to engineer your future & accelerate your journeyAt EPAM, you can find vast opportunities for self-development: online courses and libraries, mentoring programs, partial grants of certification, and experience exchange with colleagues around the world. You will learn, contribute, and grow with usLife at EPAMEPAM is a leader in the fastest-growing segment (product development/digital platform engineering) of the IT industry. We acquired Just-BI in 2021 to reinforce our leading position as a global Business Intelligence services provider and have been growing rapidly. With a talented multinational team, we provide data and analytics expertiseWe are currently involved in end-to-end BI design and implementation projects in major national and international companies. We are proud of our entrepreneurial start-up culture and are focused on investing in people by creating continuous learning and development opportunities for our employees who deliver engineering excellence for our clients