SOC Analyst (Splunk)

Lavu Tech Solutions; Kuala Lumpur; On-site; MYR 70,000 - 120,000; Full time

Job summary

Jora Malaysia is seeking a hands-on SOC specialist to monitor and respond to security incidents across IT, OT/ICS, endpoints and email. You will leverage Splunk SIEM to detect threats and drive rapid containment.

You will investigate alerts, perform threat hunting, root cause analysis, and coordinate remediation with infrastructure and security teams. Experience with EDR/XDR tools and security gateways is preferred.

Qualifications

• Hands-on SOC experience in security monitoring and incident response.
• Expertise with Splunk SIEM for threat detection and investigation.
• Experience with ICS/OT security and EDR/XDR tooling is a plus.

Responsibilities

• Monitor, detect, analyze, and respond to security incidents across IT, OT/ICS, endpoints, and email environments.
• Investigate security alerts, perform threat hunting and root cause analysis, and coordinate containment and remediation.
• Manage Splunk dashboards, correlation rules, alerts, and use cases to improve detection capabilities.
• Collaborate with infrastructure and security teams to strengthen security posture and support vulnerability management activities.

Skills

ICS/OT Security

Endpoint Security

Email Security

MITRE ATT&CK

IOC Analysis

Threat Hunting

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

Hands-on experience in Security Operations Center (SOC) with strong expertise in Splunk SIEM for security monitoring, log analysis, correlation, and incident investigation.

Monitor, detect, analyze, and respond to security incidents across IT, IC/OT, endpoint, and email security environments.

Investigate security alerts, perform threat hunting, root cause analysis, and coordinate incident containment and remediation.

Manage and fine-tune Splunk dashboards, correlation rules, alerts, and use cases to improve detection capabilities.

Work with security tools such as EDR/XDR, Email Security Gateways, IDS/IPS, Firewalls, and IC/OT security solutions.

Collaborate with infrastructure and security teams to strengthen security posture, ensure compliance, and support vulnerability management activities.

Required Skills:

• ICS/OT Security
• Endpoint Security (Microsoft Defender, CrowdStrike, SentinelOne, etc.)
• Email Security (Microsoft Defender for Office 365, Proofpoint, Mimecast, etc.)
• MITRE ATT&CK, IOC Analysis, Threat Hunting