SOC L2 Analyst: Threat Hunting & Incident Response

Atos Services (M) Sdn Bhd; Cyberjaya; Sur place; MYR 60 000 - 100 000; Plein temps

Résumé du poste

Atos Services (M) Sdn Bhd is seeking a skilled SOC L2 Analyst to join its cybersecurity operations in Malaysia. You will perform detailed investigations, triage alerts, and guide escalation within SLAs, leveraging SIEM, EDR/XDR, identity, network, email, and cloud data to protect critical assets.

The role emphasizes proficiency with Microsoft Sentinel and Defender XDR/EDR, strong log analysis using KQL, and collaboration with L1 analysts to improve detection, incident response, and

Qualifications

• 3–5 years of SOC or cybersecurity experience.
• Hands-on experience with Microsoft Sentinel and Microsoft Defender XDR/EDR, or equivalent platforms.
• Good knowledge of Kusto Query Language and security log analysis.
• Strong understanding of incident investigation, phishing, malware, identity, endpoint, and network security.
• Knowledge of the MITRE ATT&CK framework and threat intelligence practices.
• Strong analytical, communication, and escalation-management skills.
• Experience with Microsoft Defender for Endpoint, Microsoft Entra ID, Microsoft Defender for Identity, and Microsoft Purview.
• Knowledge of SOAR, security automation, and Azure Logic Apps.
• Experience with Splunk, IBM QRadar, ArcSight, Trellix, or Palo Alto security tools.
• SC-200, GCIH, CompTIA Security+, or CEH certifications.

Responsabilités

• Perform L2 investigation and triage of security alerts and incidents.
• Analyze alerts from SIEM, EDR/XDR, identity, network, email, and cloud sources.
• Correlate logs and establish an accurate incident timeline.
• Validate indicators of compromise and assess threat severity, scope, and impact.
• Escalate confirmed or high-severity incidents within defined service-level agreements.
• Support threat hunting and detection or use-case tuning.
• Perform root cause analysis for significant incidents and recommend corrective actions.
• Maintain accurate investigation notes and incident documentation.
• Provide technical guidance and troubleshooting support to L1 analysts.

Connaissances

SOC experience

L2 analyst

Microsoft Sentinel

Defender XDR

KQL

Threat intel

Incident investigation

Outils

Splunk

QRadar

ArcSight

Trellix

Palo Alto

Azure Logic Apps

Description du poste

Atos Services (M) Sdn Bhd is seeking a skilled SOC L2 Analyst to join its cybersecurity operations in Malaysia. You will perform detailed investigations, triage alerts, and guide escalation within SLAs, leveraging SIEM, EDR/XDR, identity, network, email, and cloud data to protect critical assets.

The role emphasizes proficiency with Microsoft Sentinel and Defender XDR/EDR, strong log analysis using KQL, and collaboration with L1 analysts to improve detection, incident response, and