SOC L3 Analyst

Skill Quotient Technologies Inc; Kuala Lumpur; On-site; MYR 110,000 - 160,000; Full time

Job summary

Jora Malaysia is seeking a Security Operations Center (SOC) Level 3 Analyst to lead major incident responses, perform advanced threat hunting, and conduct digital forensics. You will build detection rules and guide junior analysts to strengthen security across the organization.

The role requires deep knowledge of network protocols, cloud security, and the MITRE ATT&CK framework, with CISSP/GCFA/GCIH/OSCP certifications highly regarded.

Qualifications

• 5+ years in IT security with at least 2–3 years as L2/L3 analyst.
• Strong knowledge of network protocols, operating systems, cloud security, MITRE ATT&CK, and core forensics.
• Advanced industry credentials such as CISSP, GCFA, GCIH, or OSCP.

Responsibilities

• Threat Hunting: proactively search networks and endpoints for hidden threat actors using IoCs and TTPs.
• Incident Leadership: lead high-impact security breaches, coordinate containment, and perform deep forensic analysis.
• Detection Engineering: write, test, and tune high-fidelity SIEM/EDR/NDR detection rules.
• Malware Reverse Engineering: analyze malicious payloads to understand functionality and impact.
• Mentorship: train and support junior analysts during escalations.

Skills

Threat hunting

Incident leadership

Detection engineering

Malware reverse engineering

Mentorship

Education

CISSP or GCFA or GCIH or OSCP

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

The Security Operations Center (SOC) Level 3 (L3) Analyst will lead major incident responses, perform advanced threat hunting, conduct digital forensics and malware analysis, and build detection engineering rules to protect critical business systems.

Key Responsibilities

• Threat Hunting: Proactively search networks and endpoints for hidden threat actors using indicators of compromise (IoCs) and adversary tactics, techniques, and procedures (TTPs).Incident Leadership: Lead high-impact, complex security breaches, coordinate containment strategies, and perform deep-dive forensic analysis.
• Detection Engineering: Write, test, and tune high-fidelity SIEM, EDR, and NDR detection rules to reduce false positives.
• Malware Reverse Engineering: Analyze malicious payloads, binaries, or scripts to understand functionality and impact.
• Mentorship: Train, guide, and support junior Tier 1 and Tier 2 analysts during escalations.

Required Skills & Qualifications

• Experience: 5+ years in IT security, with at least 2 to 3 years working specifically at an L2 or L3 analyst capacity.
• Technical Knowledge: Deep understanding of network protocols, operating systems, cloud security, MITRE ATT&CK framework, and core computer forensics.

Certifications: Advanced industry credentials such as CISSP, GCFA, GCIH, or OSCP.