SOC L2 Analyst

XL Axiata; Kuala Lumpur; Presencial; MYR 120.000 - 180.000; Jornada completa

Descripción de la vacante

XL Axiata is seeking an experienced Cyber Security Incident Manager in Kuala Lumpur to lead monitoring, triage investigations, and rapid response actions. You will enhance detection, analysis, and remediations with automation and robust SOPs, coordinating with multiple stakeholders across OpCOs.

The role requires 4+ years in cyber incident management, IT security certifications, and strong communication under pressure.

Formación

• Minimum 4 years of experience in Cyber Security Incident Management.
• Diploma or degree in Information Technology or equivalent.
• Certifications such as GCIH, GSEC, CySA+, CEH are advantageous.
• Strong knowledge of APTs, attack tools, techniques used by adversaries.
• Excellent written and verbal communication under pressure (IT Security Incidents).
• Experience managing multicultural regional teams.

Responsabilidades

• Support and guide teams performing Cyber Security monitoring and triage investigations prior to escalation.
• Leverage detection and response solutions to assess escalated incidents.
• Improve GSOC incident detection, contextualization, and response processes with automation where possible.
• Coordinate incident escalations with internal or external stakeholders.
• Communicate incident response actions with OpCOs within SLA.
• Analyze Threat Intelligence to maximize prevention, detection and response.
• Conduct in-depth analysis of malware or other potential threats.
• Coordinate cyber security testing activities and provide remediation advice.
• Develop and maintain SOPs and knowledge base for cyber security services.

Conocimientos

Incident management

Threat analysis

Communication under pressure

Cross-team coordination

Educación

Diploma/Degree in IT

GCIH

GSEC

CySA+

CEH

Descripción del empleo

• Support and guide the teams performing Cyber Security monitoring, to enhance their monitoring,triage investigation processes capabilities prior to escalation


• Leverage detection and response solutions in place, to further assess any escalated potentialincidents


• Continuous improvement of Axiata GSOC Cyber Incident detection, contextualization, andresponse processes, leveraging automation and orchestration where possible


• Manage and coordinate potential incidents escalations, for investigation, along with any requiredinternal or external stakeholders


• Communication and coordination of Cyber Security Incident response actions with OperationalCompanies (OpCOs) of Cyber Security Incidents are within SLA


• Analysis of Threat Intelligence, ensuring prevention, detection and response capabilities setup ismaximized against those new threats


• In depth analysis of malware or other potential malicious processes or software identified in theorganization


• Coordination of Cyber Security testing activities, and providing advice on remediation


• Develop, document, and maintain SOPs and knowledge base for cyber security services includingincident response, intelligence analysis, evidence acquisition, forensics recovery, and others


• Continuous knowledge improvement in tools and best practices in Cyber Security threatmonitoring and incident response, including contextualization and automation


• Evaluate new emerging Cyber Security technologies and make recommendations for adoptionwithin GSOC

Person Specifications

Experience and Qualifications

• Minimum 4 years working experience in Cyber Security Incident Management


• Diploma/Degree from Information Technology or equivalent discipline


• Certification such as GCIH, GSEC, CySA+, CompTIA +, CSX (P), CASP and CEH will be addedadvantage

Knowledge and Technical Skills

• Excellent knowledge of Advanced Persistent Threats, attack tools, techniques, and methods usedby adversaries


• Excellent knowledge of penetration testing services and techniques


• Excellent written and verbal communication skills and ability to perform working under pressure(IT Security Incidents)


• Experienced in multicultural and regional teams' management and coordination


• Ability to define, prioritize and execute process in a structured manner