Senior SOC Analyst

Pride Global; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Jora Malaysia is seeking an experienced Senior SOC Analyst to handle advanced security alert investigation, incident response, threat hunting, and escalation. The role also guides junior analysts and supports continuous improvement of SOC detection and response capabilities.

You will work across SIEM, EDR/XDR, identity, network, email, and cloud environments, perform L2/L3 investigations, develop use-case tuning, and participate in drills.

Qualifications

• 4–6+ years of SOC/Cybersecurity experience.
• Hands-on with Microsoft Sentinel and Defender XDR/EDR.
• Good knowledge of KQL and security log analysis.
• Strong incident investigation, response, and threat-hunting skills.
• Knowledge of MITRE ATT&CK and Threat Intelligence.
• Experience with malware, phishing, identity attacks, PowerShell, lateral movement, and data exfiltration.

Responsibilities

• Perform L2/L3 investigation of security alerts and high-severity incidents.
• Investigate threats across SIEM, EDR/XDR, identity, network, email, and cloud environments.
• Conduct threat hunting using IOCs, TTPs, Threat Intelligence, and MITRE ATT&CK.
• Analyze attack patterns, establish timelines, and identify root causes.
• Escalate critical incidents within defined SLAs and recommend containment/remediation actions.
• Provide technical guidance and mentoring to L1/L2 SOC analysts.
• Support SIEM use-case tuning, detection improvement, and false-positive reduction.
• Conduct RCA and prepare incident reports for stakeholders.
• Participate in incident response drills and tabletop exercises.

Skills

SOC/Cybersecurity

Microsoft Sentinel

Defender XDR/EDR

KQL

MITRE ATT&CK

Threat Intelligence

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

We are seeking an experienced Senior SOC Analyst to handle advanced security alert investigation, incident response, threat hunting, and technical escalation. The role will also provide guidance to junior analysts and support continuous improvement of SOC detection and response capabilities.

Key Responsibilities

• Perform L2/L3 investigation of security alerts and high-severity incidents.
• Investigate threats across SIEM, EDR/XDR, identity, network, email, and cloud environments.
• Conduct threat hunting using IOCs, TTPs, Threat Intelligence, and MITRE ATT&CK.
• Analyze attack patterns, establish timelines, and identify root causes.
• Escalate critical incidents within defined SLAs and recommend containment/remediation actions.
• Provide technical guidance and mentoring to L1/L2 SOC analysts.
• Support SIEM use-case tuning, detection improvement, and false-positive reduction.
• Conduct RCA and prepare incident reports for stakeholders.
• Participate in incident response drills and tabletop exercises.

Requirements

• 4–6+ years of SOC/Cybersecurity experience.
• Hands-on experience with Microsoft Sentinel and Defender XDR/EDR or equivalent.
• Good knowledge of KQL and security log analysis.
• Strong incident investigation, response, and threat-hunting skills.
• Knowledge of MITRE ATT&CK and Threat Intelligence.
• Experience with malware, phishing, identity attacks, PowerShell, lateral movement, and data exfiltration.
• Strong analytical, communication, and escalation-management skills.

Preferred

• Experience with Defender for Endpoint, Defender for Identity, Entra ID, Purview, SOAR/Logic Apps, Splunk, QRadar, ArcSight, Trellix, or Palo Alto.
• Knowledge of cloud security and UEBA.
• Certifications such as GCIH, GCFA, SC-200, Security+, or CEH.

KPIs

• Accurate and timely alert investigation.
• SLA compliance and effective escalation.
• Quality of incident analysis and reporting.
• Successful threat hunting and detection improvements.
• Reduction in missed alerts and false positives.