SOC Analyst - 6 months Contract

Hong Leong Bank; Petaling Jaya; Vor Ort; MYR 150.000 - 180.000; Vollzeit

Zusammenfassung

Hong Leong Bank is seeking a Senior SOC Analyst to join our security team in Malaysia. You will support day-to-day SOC L2 operations, investigate incidents, and drive threat hunting efforts to strengthen our security posture.

You will triage alerts, review logs from SIEM/EDR/Firewall, and coordinate with MSSPs for escalations. A strong background in incident response and detection engineering is required for this fast-paced role.

Qualifikationen

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 5+ years in a dedicated security role with incident response, security operations or threat hunting.
• Proven experience with SIEM platforms (Splunk, ArcSight, QRadar).
• In-depth understanding of network protocols, Windows and Linux OS, and common attack vectors.
• Hands-on experience with endpoint detection and response (EDR).
• Strong analytical and problem-solving skills with the ability to assess complex situations and make sound decisions.
• Excellent written and verbal communication skills; ability to communicate to technical and non-technical audiences.
• Ability to work independently and as part of a team in a fast-paced environment.

Aufgaben

• Conduct daily SOC L2 operations focusing on investigations of security alerts and initial countermeasures.
• Triage, investigate and identify root causes; escalate to incident response when needed.
• Review alerts from SIEM, EDR, WAF and logs from Firewall/Proxy/IPS etc.
• Serve as the point of contact for L1 escalations from external MSSP providers.
• Update and tune SOC run books; implement new detection strategies.
• Contain and eradicate detected threats following defined MTTA, MTTD, MTTR.
• Proactively search for new threats, develop and use threat intel to identify IOCs and attack patterns.
• Tune and improve detection rules; propose new correlations or alerting rules.
• Evaluate SOC processes for efficiency and identify automation opportunities.
• Contribute to incident response playbooks, threat hunting frameworks and SOPs.

Kenntnisse

Analytical thinking

Problem solving

Communication skills

Teamwork

Ausbildung

Bachelor's degree in Computer Science / Information Security

Tools

Splunk

ArcSight

QRadar

EDR

Jobbeschreibung

We are seeking highly motivated and experienced Senior SOC Analyst to join our growing security team. This role will be supporting day-to-day SOC L2 operations, incident investigation and threat hunting effort and contributing to the continuous improvement of our security posture. If you are passionate about cybersecurity, possess a keen eye for detail, and thrive in a fast-paced environment, we encourage you to apply.

Responsibilities

Security Operations

Conduct daily SOC L2 operations, where the focus is day-to-day investigations into security alerts and implementing initial protective countermeasures. Investigating signs of malicious activity or active threats.

Using skills to triage, investigate and identify root causes. When the need arises, implementing initial blocking, containment or escalations to incident response personnel for further action based on defined triggers.

Review multiple sources of correlated alerts from a wide range of sources such as SIEM, EDR, WAF plus ability to review further direct logs from Firewall, Proxy, NAC, IPS or other protective and detective controls.

Be the point of contact for L1 escalations from external MSSP providers. Triage and disposition alerts and L1 escalations. Provide further tasking to L1 as needed.

Update existing SOC run books while implement new strategies to detect and tune alerts.

Perform day-to-day work on containment and eradication of detected threats.

Operate within defined Mean Time to Acknowledge (MTTA), Mean Time to Detect (MTTD), and Mean Time to Respond (MTTR)

Hunting & Detection Engineering

Proactively search for new emerging cyber threats, exploits, and other sophisticated attack techniques within our network and systems, including Living-of-the land and other sophisticated attack methods.

Develop and utilize threat intelligence to identify new indicators of compromise (IOCs) and attack patterns.

Leverage security tools and network telemetry to uncover stealthy activities and anomalous behaviors.

Recommend tuning of existing detection rules, recommend new correlations or alerting rules

Process Improvement & Optimization

Evaluate existing SOC processes, procedures, and tools for effectiveness and efficiency.

Identify opportunities for automation and orchestration to streamline security operations.

Develop and implement improvements to incident response playbooks, threat hunting frameworks, and other security workflows.

Standardize and regularly update standard operating procedures (SOPs), and escalation matrices.

Contribute to workflow automation and orchestration to optimize L2 analyst response capacity.

Required Qualifications

Skills and Experience We Are Looking For:

Bachelor's degree in Computer Science, Information Security, or a related field; equivalent practical experience will be considered.

5+ years of experience in a dedicated security role, with a strong focus on incident response, security operations, or threat hunting.

Proven experience with Security Information and Event Management (SIEM) platforms (e.g., Splunk, ArcSight, QRadar).

In-depth understanding of network protocols, operating systems (Windows, Linux), and common attack vectors.

Hands-on experience with endpoint detection and response (EDR) solutions.

Strong analytical and problem-solving skills, with the ability to quickly assess complex situations and make sound decisions.

Excellent written and verbal communication skills, with the ability to articulate technical concepts to both technical and non-technical audiences.

Ability to work independently and as part of a team in a fast-paced, dynamic environment.

Preferred Qualifications

Relevant industry certifications (e.g., CISSP, GCIH, GCFA, GNFA, OSCP, CISSP, CEH).

Experience with scripting languages (e.g., Python, PowerShell) for automation and data analysis.

Experience with vulnerability management and penetration testing concepts.

Knowledge of forensic tools and techniques.

Experience in a regulated industry (e.g., finance, healthcare).

We are a leading financial institution in Malaysia backed by a century of entrepreneurial heritage. Providing comprehensive financial services guided by a Digital-at-the-Core ethos has earned us industry recognition and accolades for our innovative approach in making banking simpler and more effortless for our customers. Our digital and physical offerings span across a vast nationwide network in Malaysia, strengthened with an expanding regional presence in Singapore, Hong Kong, Vietnam, Cambodia, and China.

We seek to strike a balance between diversity, inclusion and merit to achieve our mission of infusing diversity in thinking and skillsets into our organisation. Candidates are assessed based on merit and potential, in line with our mission to attract and recruit the best talent available. Expanding on our "Digital at the Core" ethos, we are progressively digitising the employee journey and experience to provide a strong foundation for our people to drive life-long learning, achieve their career aspirations and grow talent from within our organisation.

We are a leading financial institution in Malaysia backed by a century of entrepreneurial heritage. Providing comprehensive financial services guided by a Digital-at-the-Core ethos has earned us industry recognition and accolades for our innovative approach in making banking simpler and more effortless for our customers. Our digital and physical offerings span across a vast nationwide network in Malaysia, strengthened with an expanding regional presence in Singapore, Hong Kong, Vietnam, Cambodia, and China.

We seek to strike a balance between diversity, inclusion and merit to achieve our mission of infusing diversity in thinking and skillsets into our organisation. Candidates are assessed based on merit and potential, in line with our mission to attract and recruit the best talent available. Expanding on our "Digital at the Core" ethos, we are progressively digitising the employee journey and experience to provide a strong foundation for our people to drive life-long learning, achieve their career aspirations and grow talent from within our organisation.

Researching careers? Find all the information and tips you need on career advice.