SOC Analyst (L2 Cybersecurity Operations) - Day Shift

Adventus; Kuala Lumpur; On-site; MYR 60,000 - 90,000; Full time

Job summary

Adventus is seeking a SOC Analyst to join its Managed Security Operations Center in Kuala Lumpur. You will monitor alerts, investigate threats, manage incidents, and coordinate with customers and internal teams to ensure timely resolution.

The role follows a fixed day shift and a 3.5 day work week with one weekend off. You will work in shifts, including longer daytime hours, supporting ASEAN customers.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Understanding of cybersecurity fundamentals, SIEM monitoring, incident management, identity security, endpoint protection, and email security.
• Familiarity with Microsoft security technologies, preferably Microsoft Defender.
• Basic knowledge of security log analysis, KQL, or PowerShell is an advantage.
• 1–2 years of experience in SOC operations, cybersecurity, or IT operations.
• Experience in a Managed Security Services Provider (MSSP) environment is an advantage.
• Relevant certifications such as Microsoft SC-200, SC-900, CompTIA Security+, or ISC2 Certified in Cybersecurity are preferred.
• Strong analytical and problem-solving skills.
• Good written and verbal communication skills.
• Attention to detail and accurate documentation.
• Ability to work independently and remain effective under pressure.
• Willingness to work rotating shifts, if required.

Responsibilities

• Monitor security alerts across multiple security platforms and identify potential threats.
• Triage and investigate alerts, analyse security logs, and distinguish true positives from false positives.
• Assess incident severity, gather indicators of compromise (IOCs), and document investigation findings.
• Manage and track security incidents in ServiceNow, ensuring compliance with SLAs.
• Communicate incident updates and recommendations to customers professionally.
• Escalate complex incidents to L3 analysts and the SOC Manager, and support containment and remediation activities.
• Maintain accurate incident records, shift handovers, and operational documentation.

Skills

SOC operations

SIEM monitoring

Incident management

Threat detection

Communication skills

Analytical thinking

Education

Bachelor's degree in Cybersecurity

Tools

Microsoft Defender

PowerShell

KQL

Job description

Role Overview

We are seeking SOC Analysts to join our Managed Security Operations Center (SOC), supporting customers across ASEAN. You will monitor security alerts, investigate potential threats, manage incidents, and coordinate with customers and internal technical teams to ensure timely incident resolution.

This role follows a fixed day shift schedule 3 and a half day work week, 1 weekend off.

Working hours:

Full day: 13 hours shift (9am – 10pm)

Half day: 6.5 hours shift (9am - 3.30pm / 3pm – 9.30pm)

Job Responsibilities

• Monitor security alerts across multiple security platforms and identify potential threats.
• Triage and investigate alerts, analyse security logs, and distinguish true positives from false positives.
• Assess incident severity, gather indicators of compromise (IOCs), and document investigation findings.
• Manage and track security incidents in ServiceNow, ensuring compliance with SLAs.
• Communicate incident updates and recommendations to customers professionally.
• Escalate complex incidents to L3 analysts and the SOC Manager, and support containment and remediation activities.
• Maintain accurate incident records, shift handovers, and operational documentation.

Job Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Understanding of cybersecurity fundamentals, SIEM monitoring, incident management, identity security, endpoint protection, and email security.
• Familiarity with Microsoft security technologies, preferably Microsoft Defender.
• Basic knowledge of security log analysis, KQL, or PowerShell is an advantage.
• 1–2 years of experience in SOC operations, cybersecurity, or IT operations.
• Experience in a Managed Security Services Provider (MSSP) environment is an advantage.
• Relevant certifications such as Microsoft SC-200, SC-900, CompTIA Security+, or ISC2 Certified in Cybersecurity are preferred.
• Strong analytical and problem-solving skills.
• Good written and verbal communication skills.
• Attention to detail and accurate documentation.
• Ability to work independently and remain effective under pressure.
• Willingness to work rotating shifts, if required.