SOC Analyst L2

PERSOL Workforce Solutions Malaysia Sdn Bhd; Kuala Lumpur; On-site; MYR 60,000 - 100,000; Full time

Job summary

PERSOL Workforce Solutions Malaysia Sdn Bhd in Kuala Lumpur is seeking a skilled SOC professional to manage incident response across endpoints, networks, and cloud environments. You will perform threat hunts, analyze using KQL, and coordinate remediation with CSIRT teams.

The role requires hands-on use of Microsoft Sentinel, Defender XDR, SIEM, and EDR, along with strong knowledge of security fundamentals and the MITRE ATT&CK framework. Excellent communication and documentation are essential.

Qualifications

• 3+ years of experience in SOC/CSIRT/CERT/Incident Response.
• Hands-on experience with Microsoft Sentinel, Defender XDR, SIEM and EDR.
• Strong knowledge of network and endpoint security concepts and MITRE ATT&CK framework.
• Solid analytical, troubleshooting and documentation skills.

Responsibilities

• Investigate and respond to security incidents across endpoint, network, identity, and cloud environments.
• Perform threat analysis using Microsoft Sentinel, Defender XDR, SIEM and EDR.
• Conduct KQL log analysis, threat hunting, and root cause analysis.
• Validate alerts, determine severity, and coordinate remediation with CSIRT.
• Optimize SIEM use cases, detection rules, automation, and playbooks.
• Document investigations, maintain SOC procedures, and support security hardening.
• Participate in on-call support rotations.

Skills

Analytical thinking

Incident response

Communication skills

Tools

Microsoft Sentinel

Microsoft Defender XDR

SIEM

EDR

KQL

Firewalls

IDS/IPS

Active Directory

MITRE ATT&CK

Job description

Responsibilities

• Investigate and respond to security incidents across endpoint, network, identity, and cloud environments.
• Perform threat analysis using Microsoft Sentinel, Microsoft Defender XDR, SIEM, and EDR.
• Conduct KQL log analysis, threat hunting, and root cause analysis.
• Validate alerts, determine severity, and coordinate incident remediation with CSIRT.
• Optimize SIEM use cases, detection rules, automation, and playbooks.
• Document investigations, maintain SOC procedures, and support security hardening.
• Participate in on-call support rotations.

Requirements

• 3+ years of experience in SOC/CSIRT/CERT/Incident Response.
• Hands‑on experience with Microsoft Sentinel, Microsoft Defender XDR, SIEM, EDR, and KQL.
• Strong knowledge of Firewalls, IDS/IPS, TCP/IP, DNS, Active Directory, Windows/Linux Security, Microsoft 365 Security, and the MITRE ATT&CK Framework.
• Strong analytical, troubleshooting, incident investigation, communication, and documentation skills.