Senior SOC Analyst

Pride Global; Cyberjaya; On-site; MYR 120,000 - 180,000; Full time

Job summary

Jora Malaysia is seeking a Senior SOC Analyst to lead advanced security alert investigations and incident response. You will mentor junior analysts and help improve SOC detection and response capabilities across SIEM, EDR/XDR, identity, network, email, and cloud environments.

Ideal candidates have 4–6+ years in SOC/cybersecurity, hands-on Defender XDR/EDR and Sentinel experience, and strong MITRE ATT&CK knowledge. This role emphasizes analytical skills and proactive threat hunting.

Qualifications

• 4–6+ years of SOC/cybersecurity experience.
• Hands-on with Microsoft Sentinel and Defender XDR/EDR.
• Strong knowledge of KQL and security log analysis.
• Experience with MITRE ATT&CK and Threat Intelligence.
• Experience with malware, phishing, identity attacks, PowerShell, lateral movement, data exfiltration.
• Strong analytical, communication and escalation-management skills.

Responsibilities

• Perform L2/L3 investigation of security alerts and high-severity incidents.
• Investigate threats across SIEM, EDR/XDR, identity, network, email, and cloud.
• Conduct threat hunting using IOCs, TTPs, Threat Intelligence, and MITRE ATT&CK.
• Analyze attack patterns, establish timelines, and identify root causes.
• Escalate critical incidents within SLAs and recommend containment/remediation actions.
• Provide technical guidance and mentoring to L1/L2 SOC analysts.
• Support SIEM use-case tuning, detection improvement, and false-positive reduction.
• Conduct RCA and prepare incident reports for stakeholders.
• Participate in incident response drills and tabletop exercises.

Skills

SOC/Cybersecurity

Microsoft Sentinel

KQL

Threat hunting

Incident response

MITRE ATT&CK

Communication

Tools

Splunk

QRadar

ArcSight

Palo Alto

PowerShell

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

We are seeking an experienced Senior SOC Analyst to handle advanced security alert investigation, incident response, threat hunting, and technical escalation. The role will also provide guidance to junior analysts and support continuous improvement of SOC detection and response capabilities.

Key Responsibilities

• Perform L2/L3 investigation of security alerts and high-severity incidents.
• Investigate threats across SIEM, EDR/XDR, identity, network, email, and cloud environments.
• Conduct threat hunting using IOCs, TTPs, Threat Intelligence, and MITRE ATT&CK.
• Analyze attack patterns, establish timelines, and identify root causes.
• Escalate critical incidents within defined SLAs and recommend containment/remediation actions.
• Provide technical guidance and mentoring to L1/L2 SOC analysts.
• Support SIEM use-case tuning, detection improvement, and false-positive reduction.
• Conduct RCA and prepare incident reports for stakeholders.
• Participate in incident response drills and tabletop exercises.

Requirements

• 4–6+ years of SOC/Cybersecurity experience.
• Hands-on experience with Microsoft Sentinel and Defender XDR/EDR or equivalent.
• Good knowledge of KQL and security log analysis.
• Strong incident investigation, response, and threat-hunting skills.
• Knowledge of MITRE ATT&CK and Threat Intelligence.
• Experience with malware, phishing, identity attacks, PowerShell, lateral movement, and data exfiltration.
• Strong analytical, communication, and escalation-management skills.

Preferred

• Experience with Defender for Endpoint, Defender for Identity, Entra ID, Purview, SOAR/Logic Apps, Splunk, QRadar, ArcSight, Trellix, or Palo Alto.
• Knowledge of cloud security and UEBA.
• Certifications such as GCIH, GCFA, SC-200, Security+, or CEH.

KPIs

• Accurate and timely alert investigation.
• SLA compliance and effective escalation.
• Quality of incident analysis and reporting.
• Successful threat hunting and detection improvements.
• Reduction in missed alerts and false positives.