SOC L2 Analyst - Incident Response & Threat Intel

XL Axiata; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

XL Axiata is seeking an experienced Cyber Security Incident Manager in Kuala Lumpur to lead monitoring, triage investigations, and rapid response actions. You will enhance detection, analysis, and remediations with automation and robust SOPs, coordinating with multiple stakeholders across OpCOs.

The role requires 4+ years in cyber incident management, IT security certifications, and strong communication under pressure.

Qualifications

• Minimum 4 years of experience in Cyber Security Incident Management.
• Diploma or degree in Information Technology or equivalent.
• Certifications such as GCIH, GSEC, CySA+, CEH are advantageous.
• Strong knowledge of APTs, attack tools, techniques used by adversaries.
• Excellent written and verbal communication under pressure (IT Security Incidents).
• Experience managing multicultural regional teams.

Responsibilities

• Support and guide teams performing Cyber Security monitoring and triage investigations prior to escalation.
• Leverage detection and response solutions to assess escalated incidents.
• Improve GSOC incident detection, contextualization, and response processes with automation where possible.
• Coordinate incident escalations with internal or external stakeholders.
• Communicate incident response actions with OpCOs within SLA.
• Analyze Threat Intelligence to maximize prevention, detection and response.
• Conduct in-depth analysis of malware or other potential threats.
• Coordinate cyber security testing activities and provide remediation advice.
• Develop and maintain SOPs and knowledge base for cyber security services.

Skills

Incident management

Threat analysis

Communication under pressure

Cross-team coordination

Education

Diploma/Degree in IT

GCIH

GSEC

CySA+

CEH

Job description

XL Axiata is seeking an experienced Cyber Security Incident Manager in Kuala Lumpur to lead monitoring, triage investigations, and rapid response actions. You will enhance detection, analysis, and remediations with automation and robust SOPs, coordinating with multiple stakeholders across OpCOs.

The role requires 4+ years in cyber incident management, IT security certifications, and strong communication under pressure.