Senior Security Analyst - Multi-Tenant SOC & IR

Ensign Services; Kuala Lumpur; On-site; MYR 60,000 - 100,000; Full time

Job summary

Ensign is seeking a Level 2 Security Analyst to act as an advanced escalation point in a multi-tenant MSSP environment. You will investigate threats, guide incident response, and enhance detection across client environments, with strong emphasis on escalation, mentoring, and documentation.

Required qualifications include a Bachelor’s in a related field or equivalent, 2–4 years in a SOC, and hands-on experience with SIEM/EDR/NDR. Familiarity with multiple security tools and scripting is a plus.

Qualifications

• Bachelor’s degree in cybersecurity or related field or equivalent work experience.
• 2–4 years in a Security Operations Center or similar cybersecurity environment.
• Experience in an MSSP or multi-tenant environment is highly desirable.

Responsibilities

• Analyze and respond to escalated alerts from Tier 1 analysts across multiple clients.
• Conduct in-depth investigations using SIEM, EDR, NDR, firewall logs, and other security tools.
• Perform malware analysis, log correlation, and network traffic analysis to identify attack vectors.
• Execute containment, eradication, and recovery procedures using predefined runbooks and playbooks.
• Escalate and coordinate with Level 3 analysts or incident response teams for high-severity incidents.
• Provide technical guidance, support, and mentoring to Tier 1 analysts.
• Identify gaps in detection capabilities and recommend improvements in correlation rules, tuning, and alerts.
• Support proactive threat hunting initiatives based on IOCs, TTPs, and contextual threat intelligence.
• Monitor external threat intelligence feeds and correlate them with client telemetry to identify potential risks.
• Maintain clear and accurate documentation of all investigations, actions taken, and incident outcomes.
• Contribute to the continuous improvement of SOC processes, including the development of SOPs, playbooks, and runbooks.
• Ensure all activities are performed in compliance with client‑specific SLAs, internal policies, and applicable regulatory standards.
• Participate in client‑specific onboarding activities and ensure monitoring tools are correctly configured.
• Join incident review meetings and provide root cause analysis and post‑incident reporting when required.
• Handle shift handovers with detailed summaries and ensure continuity of investigations and tasks.
• Participate in internal knowledge‑sharing sessions and contribute to SOC‑wide initiatives and improvements.

Skills

SIEM

EDR

NDR

Malware analysis

Log correlation

Network analysis

Incident response

Python

PowerShell

Documentation

Education

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field

Tools

Splunk

Sentinel

QRadar

CrowdStrike

SentinelOne

Microsoft Defender

Darktrace

Corelight

Cortex XSOAR

Jira

ServiceNow

TheHive

Job description

Ensign is seeking a Level 2 Security Analyst to act as an advanced escalation point in a multi-tenant MSSP environment. You will investigate threats, guide incident response, and enhance detection across client environments, with strong emphasis on escalation, mentoring, and documentation.

Required qualifications include a Bachelor’s in a related field or equivalent, 2–4 years in a SOC, and hands-on experience with SIEM/EDR/NDR. Familiarity with multiple security tools and scripting is a plus.