Senior Cybersecurity Analyst

PERSOL; Subang Jaya; On-site; MYR 120,000 - 180,000; Full time

Job summary

PERSOL is seeking a Senior Cybersecurity Analyst to monitor, evaluate, and enhance the group’s IT security controls, policies, and configurations across on-premises and cloud environments. You will lead threat analysis, investigations, and vulnerability remediation to ensure compliance with security standards.

The role requires hands-on experience with AD/Azure Hybrid, Kubernetes, and multi-OS environments, plus strong penetration testing skills.

Qualifications

• Proven work experience as Information Security Analyst or similar role.
• Strong knowledge of AD, Azure Hybrid platforms and cloud architectures.
• Specialize in hardening of network, IT infrastructure and cloud app security including API gateway security.
• Knowledgeable in Kubernetes container orchestration system architecture.
• Proficient with Windows, Linux, and other OS.
• Experienced with penetration testing and techniques.
• Ability to identify and mitigate network vulnerabilities.
• Strong interpersonal, analytical and rationalizing skills.
• Resourceful, independent, assertive, result-oriented, disciplined and a team player.

Responsibilities

• Monitor Security Operations Center (SOC) alerts closely for any security issues.
• Ensure all tickets raised by SOC and CA internal IT Security are responded and closed within committed service level.
• Perform cyber threat analysis and investigation on any potential security breaches and related cybersecurity incidents.
• Perform and manage vulnerability assessments on various scanning tools and ensure all major alerts are remediated.
• Evaluate and score IT Security assessment feedbacks from internal and external parties.
• Review implementation design of all new and existing projects and applications and follow through with remediations.
• Evaluate and assess cloud application security across various setup and instances.
• Manage and monitor Endpoint Detection & Response (EDR) tool in terms of endpoint compliance, alerts response, and policy configurations.
• Ensure endpoint devices compliance in terms of security and critical patches involving operating systems, standard and custom applications, and hardware firmware.
• Participate actively in penetrations and vulnerabilities assessment exercises performed by external vendors.

Skills

Information security experience

AD/Azure Hybrid

Cloud security

Network hardening

Kubernetes

Windows and Linux

Penetration testing

Vulnerability management

Analytical thinking

Team player

Job description

Senior Cybersecurity Analyst role reporting to the Group IT Security & Compliance Manager at a leading regional private healthcare group. The position involves monitoring, evaluating, and assessing the organisation’s IT security controls, policies, infrastructure, and configurations to ensure compliance with established security standards and requirements. You will also be responsible for managing cybersecurity alerts and threats through in-depth threat analysis and investigation.

Key responsibilities

Monitor Security Operations Center (SOC) alerts closely for any security issues

Ensure all tickets raised by SOC and CA internal IT Security are responded and closed within committed service level

Perform cyber threat analysis and investigation on any potential security breaches and related cybersecurity incidents

Perform and manage vulnerability assessments on various scanning tools and ensure all major alerts are remediated

Evaluate and score IT Security assessment feedbacks from internal and external parties

Review implementation design of all new and existing projects and applications and follow through with remediations

Evaluate and assess cloud application security across various setup and instances

Manage and monitor Endpoint Detection & Response (EDR) tool in terms of endpoint compliance, alerts response, and policy configurations

Ensure endpoint devices compliance in terms of security and critical patches involving operating systems, standard and custom applications, and hardware firmware

Participate actively in penetrations and vulnerabilities assessment exercises performed by external vendors

About you

Proven work experience as Information Security Analyst or similar role

Knowledgeable in AD, Azure Hybrid platforms and various other public and private cloud architecture

Specialize in hardening of network, IT infrastructure and cloud app security including API gateway security

Knowledgeable in Kubernetes container orchestration system architecture

Proficient with Windows, Linux, and other OS

Proficient in Microsoft Office Suite or related software

Experienced with penetration testing and techniques

Ability to identify and mitigate network vulnerabilities

Strong interpersonal, analytical and rationalizing skills

Resourceful, independent, assertive, result-oriented, disciplined and a team player