SOC Analyst

Getronics; Kuala Lumpur; On-site; MYR 60,000 - 120,000; Full time

Job summary

Getronics in Malaysia is seeking an L1 Security Analyst to monitor real-time security events, detect threats, and act as the primary contact for incidents. You will work across SIEM, EDR, and NDR platforms to triage alerts and provide timely responses.

The role requires 3+ years in an L1 or similar position, with security and cloud certifications, plus knowledge of ISO 27001, ITIL/ITSM tools like ServiceNow, and IAM/PAM across OT/IoT environments.

Qualifications

• At least 3 years of experience as L1 Analyst or similar role.
• Shifts during business hours (morning and afternoon).
• Technical cybersecurity certifications and cloud certifications.

Responsibilities

• Monitor security events in real time through SIEM, EDR and NDR platforms.
• Detect and analyze threats against networks, systems, and endpoints.
• Perform alert triage, categorization, and escalation according to procedures.
• Act as the first point of contact for security incidents.
• Prepare security and compliance reports for internal and external clients.
• Collaborate with the continuous improvement of detection rules, processes, and controls.
• Provide recommendations to strengthen security posture and incident response.

Skills

Cybersecurity certifications

Cloud certifications

Tools

ServiceNow

Job description

• At least 3 years of experience as L1 Analyst or a similar role.
• Morning and afternoon shifts during business hours.

Valuable Skills:

• Technical cybersecurity certifications (Security Essentials GSEC, SANS, Cisco, Palo Alto, etc.).
• Cloud certifications (AWS, Azure, GCP).

Knowledge in:

• Security processes: vulnerability management, dynamic/static malware analysis, threat detection, and continuous monitoring of systems and networks.
• ISO 27001.
• ITIL v3 or higher, and ITSM tools such as ServiceNow.
• Identity and Access Management (IAM) and Privileged Access Management (PAM).
• Advanced packet analysis and security monitoring in OT/IoT environments.

Main Responsibilities:

• Monitor security events in real time through SIEM, EDR and NDR platforms.
• Detect and analyze threats against networks, systems, and endpoints.
• Perform alert triage, categorization, and escalation according to procedures.
• Act as the first point of contact for security incidents.
• Prepare security and compliance reports for internal and external clients.
• Collaborate with the continuous improvement of detection rules, processes, and controls.
• Provide recommendations to strengthen security posture and incident response.