Security Operations Engineer (L2) - Threat Hunting & IR

Agensi Pekerjaan CS MALAYSIA Sdn Bhd; Cyberjaya; On-site; MYR 70,000 - 120,000; Full time

Job summary

Agensi Pekerjaan CS MALAYSIA Sdn Bhd is seeking a Security Operations Engineer (L2) to monitor, analyze, and respond to security incidents. You will perform VAPT, Security Posture reviews, and threat hunting, with on-site support as needed.

Light travel may be required for cybersecurity services. The role requires 2–4 years in SOC/IR, strong SIEM knowledge, and hands-on experience with vulnerability scanners and pentest tools.

Qualifications

• 2–4 years experience in SOC, Incident Response or Security Engineering.
• Strong knowledge of SIEM platforms (Elastic, Wazuh, Graylogs, Syslogs API).
• Experience with vulnerability scanners (Nessus, OpenVAS, Qualys) and pentest tools (Burp Suite, Metasploit, Nmap, Kali Linux).
• Understanding of ISO27001, NIST CSF, CIS, MITRE ATT&CK, PDPA Malaysia.
• Strong documentation and analytical skills.

Responsibilities

• Monitor and triage alerts from SIEM, IDS/IPS, firewalls, and EDR/XDR.
• Perform L2 analysis and correlation to identify threats and compromises.
• Escalate incidents to L3/IR with detailed notes.
• Conduct threat hunting and anomaly detection using SIEM and threat intel.
• Support IR process: containment, eradication, recovery, reporting.
• Provide guidance to L1 in triage and incident mgmt until case closed.
• Create, edit, review monthly reports.
• Perform VAPT when assigned.
• Collaborate with customer, IT and DevOps to close vulnerabilities and harden systems.
• Conduct Security Posture & Compliance Assessments for clients.

Skills

Threat analysis

Incident response

Security monitoring

Documentation

Education

Bachelor's Degree in Cybersecurity or related field

Tools

Elastic

Wazuh

Graylogs

Syslogs API

Nessus

OpenVAS

Qualys

Burp Suite

Metasploit

Nmap

Kali Linux

Job description

Agensi Pekerjaan CS MALAYSIA Sdn Bhd is seeking a Security Operations Engineer (L2) to monitor, analyze, and respond to security incidents. You will perform VAPT, Security Posture reviews, and threat hunting, with on-site support as needed.

Light travel may be required for cybersecurity services. The role requires 2–4 years in SOC/IR, strong SIEM knowledge, and hands-on experience with vulnerability scanners and pentest tools.