SOC Incident Response & Threat Intelligence Analyst

Confidential Company; Subang Jaya; On-site; MYR 60,000 - 90,000; Full time

Job summary

Confidential Company is seeking a SOC/IR professional to support service delivery with a focus on confidentiality, integrity, and availability. The role involves monitoring security events with RSA NetWitness/Devo SIEM, performing initial investigations, and coordinating incident response through full lifecycle.

You will also generate regular reports, update shift logs, and participate in ad-hoc projects and threat research.

Qualifications

• Experience in security operations center (SOC) or incident response.
• Familiarity with SIEM tools and incident handling processes.
• Analytical mindset with ability to triage and investigate security events.

Responsibilities

• Assure confidentiality, availability and integrity in service support and delivery.
• Perform security perimeter device change management.
• Support user requirements with fixes and recommendations.
• Monitor event queues for potential incidents using RSA NetWitness/Devo SIEM per guidelines.
• Conduct initial investigation and triage of incidents and escalate or close events as applicable.
• Manage incidents through full lifecycle until closure and remediation.
• Gather, log and investigate information to remediate issues.
• Perform detailed event analysis and coordinate investigations against suspicious traffic.
• Produce reports (weekly/monthly/quarterly/yearly) as required (audit/ad-hoc).
• Submit internal daily performance and availability monitoring status.
• Participate in ad-hoc projects and onsite/offsite implementations.
• Participate in other ad-hoc tasks assigned by superior/management.
• Conduct security research on emerging threats, exploits or vulnerabilities.
• Maintain SOC shift logs and update SOC collaboration tools.

Job description

Confidential Company is seeking a SOC/IR professional to support service delivery with a focus on confidentiality, integrity, and availability. The role involves monitoring security events with RSA NetWitness/Devo SIEM, performing initial investigations, and coordinating incident response through full lifecycle.

You will also generate regular reports, update shift logs, and participate in ad-hoc projects and threat research.