Senior SOC Engineer — Microsoft Sentinel (Hybrid, 1-Year Contract)

Oxydata Software Sdn Bhd; Petaling Jaya; Hybrid; MYR 120,000 - 180,000; Part time

Benefits offered by this job

Hybrid work arrangement

Job summary

Oxydata Software Sdn Bhd in Malaysia is seeking a Senior Security Engineer specializing in Microsoft Sentinel to support enterprise cybersecurity operations. The role requires at least 3 years of hands-on SOC experience and deep knowledge of Microsoft Sentinel, KQL, and Defender.

You will monitor alerts, develop threat-hunting queries, perform triage and remediation, investigate phishing incidents, and map activities to MITRE ATT&CK.

Qualifications

• Minimum 3 years hands-on SOC experience.
• Strong hands-on experience with Microsoft Sentinel SIEM.
• Practical experience with Microsoft Defender and threat hunting.
• Proven experience in security incident response and phishing analysis.

Responsibilities

• Monitor, analyze, and investigate security alerts using Microsoft Sentinel SIEM.
• Develop and execute KQL queries for threat hunting and investigations.
• Perform security incident triage, analysis, containment, remediation, and escalation.
• Investigate phishing incidents including suspicious emails, URLs and IOCs.
• Manage security incidents and ensure resolution within SLAs.
• Map incidents to MITRE ATT&CK tactics, techniques, and procedures (TTPs).
• Apply NIST Cybersecurity Framework principles in SOC operations.
• Support Microsoft Defender, SIEM architecture, and monitoring tools.
• Work with EDR, IDS/IPS, firewalls, and endpoint security solutions.

Skills

SOC experience

Microsoft Sentinel

Threat hunting

Incident response

Tools

KQL

Microsoft Defender

Job description

Oxydata Software Sdn Bhd in Malaysia is seeking a Senior Security Engineer specializing in Microsoft Sentinel to support enterprise cybersecurity operations. The role requires at least 3 years of hands-on SOC experience and deep knowledge of Microsoft Sentinel, KQL, and Defender.

You will monitor alerts, develop threat-hunting queries, perform triage and remediation, investigate phishing incidents, and map activities to MITRE ATT&CK.