SOC Analyst L2

PERSOL; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Benefits offered by this job

Health insurance

Job summary

Jora Malaysia is seeking a seasoned SOC professional to detect, investigate, and respond to security incidents across endpoints, networks, and cloud environments. You will perform threat analysis using SIEM/EDR tools and conduct in-depth log analysis with KQL.

The role requires strong knowledge of security fundamentals, incident handling, and cross-team coordination to remediate threats and improve SOC processes.

Qualifications

• 3+ years of experience in SOC/CSIRT/CERT/Incident Response.
• Hands-on experience with Microsoft Sentinel, Defender XDR, SIEM, EDR, and KQL.
• Strong knowledge of Firewalls, IDS/IPS, TCP/IP, DNS, Active Directory, Windows/Linux Security, Microsoft 365 Security, and MITRE ATT&CK.
• Strong analytical, troubleshooting, incident investigation, communication, and documentation skills.

Responsibilities

• Investigate and respond to security incidents across endpoint, network, identity, and cloud environments.
• Perform threat analysis using Microsoft Sentinel, Microsoft Defender XDR, SIEM, and EDR.
• Conduct KQL log analysis, threat hunting, and root cause analysis.
• Validate alerts, determine severity, and coordinate incident remediation with CSIRT.
• Optimize SIEM use cases, detection rules, automation, and playbooks.
• Document investigations, maintain SOC procedures, and support security hardening.
• Participate in on-call support rotations.

Skills

Microsoft Sentinel

Defender XDR

SIEM

EDR

KQL

Active Directory

MITRE ATT&CK

Tools

Firewall

IDS/IPS

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

Responsibilities

• Investigate and respond to security incidents across endpoint, network, identity, and cloud environments.
• Perform threat analysis using Microsoft Sentinel, Microsoft Defender XDR, SIEM, and EDR.
• Conduct KQL log analysis, threat hunting, and root cause analysis.
• Validate alerts, determine severity, and coordinate incident remediation with CSIRT.
• Optimize SIEM use cases, detection rules, automation, and playbooks.
• Document investigations, maintain SOC procedures, and support security hardening.
• Participate in on-call support rotations.

Requirements

• 3+ years of experience in SOC/CSIRT/CERT/Incident Response.
• Hands-on experience with Microsoft Sentinel, Microsoft Defender XDR, SIEM, EDR, and KQL.
• Strong knowledge of Firewalls, IDS/IPS, TCP/IP, DNS, Active Directory, Windows/Linux Security, Microsoft 365 Security, and the MITRE ATT&CK Framework.
• Strong analytical, troubleshooting, incident investigation, communication, and documentation skills.