SOC L2 IT Security Analyst – Incident Response

RHB Banking Group; Selangor; On-site; MYR 60,000 - 110,000; Full time

Job summary

RHB Banking Group is seeking an IT Security Analyst to join its 24/7 Security Operations Centre in Malaysia. This Level 2 role focuses on incident detection, analysis, escalation, and proactive security improvement.

You will mentor Level-1 analysts and collaborate cross-functionally to strengthen the bank's cybersecurity posture. The ideal candidate has SOC experience at L2 or equivalent, strong analytical skills, and proficiency with SIEM, packet capture, forensics, and memory analysis tools.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• Hands-on SOC experience at least L2 or equivalent.
• Strong analytical and problem-solving with root cause and threat analysis.
• Proficient in investigative tools such as SIEM, packet capture analysis, host forensics, and memory analysis.
• Excellent communication and teamwork; mentoring junior analysts.

Responsibilities

• Respond to security alerts 24x7x365 and document actions taken.
• Act as escalation point for Level-1 analysts during shifts.
• Escalate incidents to L3 with detailed analysis and recommendations.
• Collaborate with other teams for incident handling and resolution.
• Mentor Level-1 analysts to improve detection capabilities.
• Contribute to process improvements and tuning of security controls.
• Document processes and ensure accuracy and updates.

Skills

SIEM

Packet capture

Host forensics

Memory analysis

Analytical thinking

Problem solving

Communication

Mentoring

Education

Bachelors degree in Computer Science or Information Security

Tools

SIEM tools

Job description

About The Role

We are looking for a highly skilled and motivated

About The Role

We are looking for a highly skilled and motivated IT Security Analyst to join our 24/7 Security Operations Centre (SOC) at RHB Bank. This Level 2 (L2) role is integral to our continuous monitoring operations, serving as a subject-matter expert in incident detection, analysis, and escalation. You will be responsible for providing advanced analysis support, mentoring Level-1 analysts, and enhancing the Bank’s overall cybersecurity posture through proactive monitoring, incident response, and process improvement.

What You Will Be Doing

Collaboration and Escalation:

• To timely response to security alerts using a combination of technology solutions and a complete & reliable set of documented processes on a 24 x 7 x 365 basis
• Act as a point of escalation for Level-1 analysts in 12-hour shift rotation
• Escalate suspected incidents to L3 with detailed analysis and actionable recommendations.
• Interfaces and collaborate with other teams for incident escalations and resolution
• Work closely with SOC Head to better security operations and address identified deficiencies
  
  

In-Depth Analysis

• Perform due diligence and in-depth analysis on escalated security alert from Level-1 analyst and escalate to respective team for further action in timely manner
• Assist in threat hunting activities to identify potential vulnerabilities.
  
  

Incident Response

• Involve in incident response steps, perform root cause analysis and recommend solutions to mitigate risks
  
  

Coaching And Mentoring

• Support Level-1 alert analysis by providing advanced analysis services to include recommending containment and remediation processes and independent analysis of security events
• Mentoring Level-1 analyst to improve detection capability within the SOC and feedback on work quality
  
  

Continuous Improvement

• Challenge and suggest improvement on existing processes and procedures in a very agile and fast-moving information security environment
• Receive and review tuning request from Level-1, provide recommendations in use case tuning and optimization of security systems
  
  

Documentation & Reporting

• Ensure all relevant processes are documented, complete, accurate and updated at least on a yearly basis or as and when any changes
  
  

What We’re Looking For

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• Hands-on experience in Security Operations Centre (SOC) environments, preferably in L2 or equivalent roles.
• Strong analytical and problem-solving skills, with the ability to perform root cause and threat analysis.
• Proficiency in investigative tools such as SIEM, packet capture analysis, host forensics, and memory analysis tools.
• Solid understanding of the cybersecurity threat landscape, including tools, tactics, and techniques used in attacks.
• Excellent communication skills, both written and verbal, with the ability to convey complex information effectively.
• Demonstrated ability to work collaboratively in a team environment and mentor junior analysts.
• Relevant industry certifications (e.g., SANS, GIAC, CompTIA Security+, CEH, or similar) are an advantage.
  
  

What We Offer

At RHB Banking Group, we cultivate a culture of vigilance, collaboration, and continuous learning. You will work with a talented team of cybersecurity professionals protecting one of Malaysia’s leading financial institutions. We offer a competitive remuneration and benefits package, opportunities for professional growth and certification, and the chance to be at the forefront of defending our digital ecosystem through advanced security operations.