SOC L1 Engineer

AGENSI PEKERJAAN TRUST RECRUIT SDN. BHD.; Selangor; On-site; MYR 60,000 - 110,000; Full time

Job summary

AGENSI PEKERJAAN TRUST RECRUIT SDN. BHD. is seeking a L1 SOC Analyst to monitor security events, triage alerts, and prepare incidents for escalation. You will work within SOPs and coordinate with L2 analysts to refine triage accuracy.

The role requires a 1–3 year background in SOC or IT security, plus certifications such as Security+, CEH, or Cisco CyberOps. English and Bahasa Malaysia communication skills are essential.

Qualifications

• Bachelor’s Degree or Diploma in Cybersecurity, CS, IT.
• 1–3 years in SOC or IT security environment.
• Certifications preferred: Security+, CEH, Cisco CyberOps Associate, eJPT, or equivalent.

Responsibilities

• Real-Time Security Monitoring of SIEM/EDR/network alerts across environments.
• Alert Triage & Initial Analysis to classify events and validate severity.
• Incident Escalation & Logging following SOPs and SLAs to L2 SOC.
• Basic Incident Response actions like containment per playbooks.
• Phishing & Endpoint Analysis on suspicious emails and logs.
• Ticketing & Documentation in ITSM system for triaged alerts.
• Collaboration with L2 Analysts to improve triage procedures.

Skills

SIEM familiarity

EDR solutions

Networking basics

Windows/Linux basics

Threat detection

Scripting basics

English & Bahasa Malaysia

Education

Bachelor’s Degree or Diploma in Cybersecurity/CS/IT

Tools

Splunk

Microsoft Sentinel

EDR solutions

Job description

The L1 SOC Analyst serves as the first line of defense in monitoring, detecting, and triaging security events across organizational networks, endpoints, and cloud environments. The primary responsibility of this role is to monitor SIEM alerts, perform initial event analysis, filter out false positives, and escrow validated incidents to L2 Analysts in accordance with Standard Operating Procedures (SOPs).

Key Responsibilities

Real-Time Security Monitoring: Continuously monitor security alerts generated by SIEM, EDR, network sensors, and security tools.

Alert Triage & Initial Analysis: Analyze and classify incoming security events, distinguish between legitimate threats and false positives, and validate incident severity.

Incident Escalation & Logging: Document initial findings clearly and escalated complex or high-severity security incidents to the Level 2 SOC team following established SLAs.

Basic Incident Response: Execute initial containment actions (e.g., isolating endpoints, resetting compromised credentials) based on standard playbooks.

Phishing & Endpoint Analysis: Perform basic inspection of suspicious emails, malicious attachments, URL links, and endpoint logs.

Ticketing & Documentation: Maintain detailed log entries in the ITSM/ticketing system for all triaged alerts and escalated cases.

Collaboration & Continuous Improvement: Work closely with L2 Analysts to refine alert handling procedures and assist in improving triage accuracy.

Job Requirements

Education: Bachelor’s Degree or Diploma in Cybersecurity, Computer Science, Information Technology, or a related field.

Experience: 1 – 3 years of working experience in a Security Operations Center (SOC) or IT security environment.

Certifications (Preferred): CompTIA Security+, CEH, Cisco CyberOps Associate, eJPT, or equivalent entry-level security credentials.

Technical Skills:

Fundamental understanding of networking protocols (TCP/IP, DNS, HTTP/S), Windows/Linux operating system basics, and event log structures.

Basic familiarity with SIEM platforms (e.g., Splunk, Microsoft Sentinel) and EDR solutions.

Knowledge of common attack vectors (e.g., phishing, brute-force, basic malware execution) and security framework concepts (MITRE ATT&CK, Cyber Kill Chain).

Basic exposure to scripting/command-line utility (PowerShell, Bash, or Python) is a plus.

Languages: Good written and verbal communication skills in English and Bahasa Malaysia.

Attributes: Strong analytical mindset, attention to detail, and ability to follow standard procedures under time-sensitive monitoring conditions.

We regret only shortlisted candidates will be notified.

Important Note: Agensi Pekerjaan Trust Recruit Sdn Bhd is committed to safeguarding your personal data in accordance with the Personal Data Protection Act (PDPA).

Please read our privacy statement on our corporate website www.trustrecruit.com.my

License No. JTKSM 1580