Senior Security Operations Engineer
Doherty IT Solutions Sdn. Bhd.
A complete application in a minute
Tailored resume and cover letter, ready to send.
Benefits offered by this job
Job summary
Doherty Associates (DA) is expanding its global Managed Services in Kuala Lumpur and seeks a Senior Security Engineer to investigate and resolve complex security incidents, manage vulnerabilities, and improve security postures for customer environments.
You will act as a senior technical escalation point across Defender, MDR/EDR/XDR, SIEM, and related security platforms, while supporting a strategic Enterprise customer with continuity and escalation coverage.
Qualifications
- Extensive experience in security operations, incident response, and vulnerability remediation.
- Hands-on with MDR/EDR/XDR, SIEM, vulnerability management, identity security, email security, firewalls, and endpoint protection.
- Experience with Microsoft Defender suite and cloud security technologies.
- Familiarity with MITRE ATT&CK, CIS Controls, and NIST CSF.
Responsibilities
- Act as a senior escalation point for complex security incidents, vulnerabilities, and technical security issues.
- Manage security tickets, escalations, and ensure timely investigations.
- Investigate alerts across SIEM, MDR, EDR/XDR, Defender, identity, endpoint, email, network and cloud security platforms.
- Lead incident response activities including containment, remediation, and recovery.
- Perform post-incident activities: root cause analysis, reporting, preventative actions, and regulatory/compliance assessments.
- Own vulnerability remediation prioritised by severity and business risk.
- Coordinate mitigation with internal teams and external SOC/MDR providers.
- Conduct proactive security reviews, vulnerability analyses, and improvement recommendations.
- Stay updated on threats and translate into customer actions.
Skills
Tools
Job description
Doherty Associates (DA) has delivered IT solutions for over 30 years to some of the world’s most prestigious and demanding clients. We focus on the professional and financial services sectors, including private equity, venture capital, and legal firms, including some of the UK’s top ten law firms.
We are a Microsoft Solutions Partner with multiple Solutions Partner designations, including Modern Work, have a Tier 1 Microsoft CSP relationship, and are ISO27001 and ISO9001 accredited.
As part of our continued growth, we are evolving our global Managed Services function and expanding our team across London and Kuala Lumpur.
We are seeking an experienced Senior Security Engineer to join our Managed Services Security team in Kuala Lumpur.
This is a hands‑on technical role responsible for investigating and resolving complex security incidents, managing vulnerabilities, supporting security platforms, and improving the security posture of our customer environments.
You will act as one of the senior technical escalation points within the Security team, working across Microsoft Defender, MDR/EDR/XDR, SIEM, identity security, vulnerability management, email security, firewalls, and Microsoft cloud security.
You will also support one of our strategic Enterprise customers as a secondary senior technical resource. This will involve building a strong understanding of the customer’s environment, providing continuity and escalation support, participating in customer‑facing technical discussions, and taking ownership of issues when required.
Act as a senior escalation point for complex security incidents, vulnerabilities, and technical security issues.
Manage security tickets and escalations, ensuring effective investigation, prioritisation, communication, and resolution.
Investigate security alerts across SIEM, MDR, EDR/XDR, Microsoft Defender, identity, endpoint, email, network, and cloud security platforms.
Lead and support incident response activities, including investigation, containment, remediation, recovery, and coordination with customers and third parties.
Complete post‑incident activities, including root cause analysis, reporting, preventative actions, and assessment of regulatory or compliance impacts.
Own and drive vulnerability remediation, prioritising activity based on severity, exploitability, exposure, and business risk.
Assess critical vulnerabilities and zero‑day threats, determine customer exposure, and coordinate mitigation or remediation through to completion.
Work with internal teams and external SOC or MDR providers to improve monitoring, alerting, and detection use cases.
Perform proactive security reviews, vulnerability analysis, and assessments to identify weaknesses and recommend improvements.
Maintain awareness of emerging threats and attacker tactics, techniques, and procedures, translating relevant developments into customer actions.
Improve security tooling, processes, documentation, procedures, and runbooks.
Provide technical guidance and mentoring to other Managed Services engineers.
Identify opportunities for automation and proactive remediation within security operations.
Act as a secondary senior technical resource for a strategic Enterprise customer, providing continuity and technical cover when required.
Maintain a strong working knowledge of the customer’s environment, security tooling, operational processes, and key risks.
Support complex incidents, security escalations, vulnerabilities, technical changes, and investigations.
Participate in customer‑facing technical discussions, security reviews, incident reviews, and service improvement activities.
Communicate technical issues, security risks, remediation plans, and recommendations clearly to customer stakeholders.
Work with specialists across security, networking, Microsoft cloud, endpoint management, and infrastructure to drive issues through to resolution.
Office Hours: Monday to Friday, Kuala Lumpur business hours, with flexibility to overlap with the London office when required.
On‑call / Standby: Participation in a 24/7 standby rota for a maximum of two weeks per month for security‑related escalations. Standby allowance and overtime are provided.
Working Model: Hybrid, with a minimum of three days per week in the office.
Strong hands‑on experience within a Security team, SOC, MSSP, or Managed Services environment.
Experience responding to cybersecurity incidents, including major security incidents.
Strong technical experience with MDR/EDR/XDR, SIEM, vulnerability management, identity security, email security, firewalls, and endpoint protection.
Hands‑on experience with Microsoft Defender, Microsoft Entra ID, Microsoft 365, and Azure security.
Experience assessing and remediating vulnerabilities, including critical and zero‑day vulnerabilities.
Good understanding of identity, endpoint, network, email, and cloud security.
Working knowledge of enterprise infrastructure, including Active Directory, Group Policy, DNS, DHCP, virtualisation, VPNs, VLANs, and firewalls.
Working knowledge of cybersecurity frameworks, compliance requirements, and recognised security practices.
Strong analytical, troubleshooting, and root cause analysis skills.
Comfortable taking ownership of complex issues and acting as a senior escalation point.
Strong customer‑facing, written, and verbal communication skills.
Experience with Microsoft Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Defender for Cloud, and Microsoft Sentinel.
Experience with Huntress, Splunk, or comparable security platforms.
Experience with Conditional Access, Identity Protection, multifactor authentication, and privileged access controls.
Experience with Fortinet/FortiGate or other enterprise network security technologies.
Familiarity with MITRE ATT&CK, CIS Controls, and the NIST Cybersecurity Framework.
Experience working with external SOC or MDR providers.
Experience supporting complex, business‑critical Enterprise environments.
PowerShell or security automation experience.
Relevant certifications are preferred but not mandatory, including:
Microsoft SC‑200 or SC‑300
Microsoft AZ‑500 or other relevant Microsoft security certifications
BTL1 or BTL2
CompTIA Security+ or CySA+
Fortinet security certifications
CCSP or CISSP
ITIL Foundation or equivalent working knowledge
A strong technical security practitioner who enjoys investigating complex problems.
Customer‑focused, proactive, and accountable.
Calm and able to make sound decisions during high‑pressure security incidents.
Confident communicating technical risks and recommendations to Enterprise customers.
Comfortable building detailed knowledge of complex customer environments.
Self‑motivated and able to work independently while collaborating effectively with others.
Willing to share knowledge and support the development of other engineers.
Competitive salary plus performance‑related bonus.
Hybrid working across home and our Kuala Lumpur office.
Wide range of company benefits.
Day off on your birthday.
Be part of an award‑winning technical team.
Company‑funded training and certifications, with incentive payments for successful completion.
We offer a competitive salary based on experience and qualifications, along with a performance‑related bonus scheme. Medical benefits are provided and parking is claimable.
Hirer responsiveness Salary match Number of applicants
Your application will include the following questions:
- Which of the following statements best describes your right to work in Malaysia?
- How would you rate your English language skills?
- What’s your expected monthly basic salary?
- Are you available to provide on call support when required?
- How many years' experience do you have in a Security Operations Role?
- How many years' experience do you have as a Security Engineer?
- How many years of Service Desk experience do you have?
Information Technology Services 51-100 employees
Doherty Associates (DA) has delivered IT solutions for over 30 years to some of the world’s most prestigious and demanding clients. We focus on the professional and financial services sectors, including private equity, venture capital, and legal firms, including some of the UK’s top ten law firms.
We are a Microsoft Gold Partner with four Solutions Partner Designations (including Modern Work), a Tier 1 Microsoft CSP relationship and are ISO27001 & ISO9001 accredited.
DA operate a global managed services team with offices in both London (HQ) and Kuala Lumpur.
Doherty Associates (DA) has delivered IT solutions for over 30 years to some of the world’s most prestigious and demanding clients. We focus on the professional and financial services sectors, including private equity, venture capital, and legal firms, - including some of the UK’s top ten law firms.
We are a Microsoft Gold Partner with four Solutions Partner Designations (including Modern Work), a Tier 1 Microsoft CSP relationship and are ISO27001 & ISO9001 accredited.
DA operate a global managed services team with offices in both London (HQ) and Kuala Lumpur.
Doherty Associates (DA) has delivered IT solutions for over 30 years to some of the world’s most prestigious and demanding clients. We focus on the professional and financial services sectors, including private equity, venture capital, and legal firms, - including some of the UK’s top ten law firms.
We are a Microsoft Gold Partner with four Solutions Partner Designations (including Modern Work), a Tier 1 Microsoft CSP relationship and are ISO27001 & ISO9001 accredited.
DA operate a global managed services team with offices in both London (HQ) and Kuala Lumpur.
To help fast track investigation, please include here any other relevant details that prompted you to report this job ad as fraudulent / misleading / discriminatory / salary below minimum wage.
Researching careers? Find all the information and tips you need on career advice.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
