Security Operations Center Analyst

Confidential Company; Subang Jaya; On-site; MYR 60,000 - 90,000; Full time

Job summary

Confidential Company is seeking a SOC/IR professional to support service delivery with a focus on confidentiality, integrity, and availability. The role involves monitoring security events with RSA NetWitness/Devo SIEM, performing initial investigations, and coordinating incident response through full lifecycle.

You will also generate regular reports, update shift logs, and participate in ad-hoc projects and threat research.

Qualifications

• Experience in security operations center (SOC) or incident response.
• Familiarity with SIEM tools and incident handling processes.
• Analytical mindset with ability to triage and investigate security events.

Responsibilities

• Assure confidentiality, availability and integrity in service support and delivery.
• Perform security perimeter device change management.
• Support user requirements with fixes and recommendations.
• Monitor event queues for potential incidents using RSA NetWitness/Devo SIEM per guidelines.
• Conduct initial investigation and triage of incidents and escalate or close events as applicable.
• Manage incidents through full lifecycle until closure and remediation.
• Gather, log and investigate information to remediate issues.
• Perform detailed event analysis and coordinate investigations against suspicious traffic.
• Produce reports (weekly/monthly/quarterly/yearly) as required (audit/ad-hoc).
• Submit internal daily performance and availability monitoring status.
• Participate in ad-hoc projects and onsite/offsite implementations.
• Participate in other ad-hoc tasks assigned by superior/management.
• Conduct security research on emerging threats, exploits or vulnerabilities.
• Maintain SOC shift logs and update SOC collaboration tools.

Job description

• Assuring confidentiality, availability and integrity in service support and delivery
• Perform security perimeter device’s change management.
• Support the user requirement by providing fix and appropriate recommendations.
• Monitor incoming event queues for potential security incidents using the RSA NetWitness/Devo SIEM tool per operation guidelines.
• Perform initial investigation and triage of potential incidents and escalate or close events as applicable.
• Incident management through complete lifecycle until the closure of incident.
• Effectively resolve the incident by gathering, logging and investigate all the necessary information to remediate the issue.
• Detailed event analysis and conduct / coordinate incident investigation against suspicious /
• abnormal traffic.
• Produce reports (weekly/monthly/quarterly/yearly) as per schedule / audit / ad-hoc
• requirement.
• Submit internal daily performance report and availability monitoring status check.
• Participate in ad-hoc project exercise and implementation (onsite / offsite).
• Participate in any other ad-hoc task assigned by your superior or management.
• Conduct security research and intelligence gathering on emerging threats, exploits or vulnerabilities.
• Maintain SOC shift logs with relevant activity from the shift.
• Update or reference SOC collaboration tool as necessary for changes to SOC process and procedure as well as ingest SOC daily intelligence reports and previous shift logs.