SOC Specialist

Pride Global; Selangor; On-site; MYR 140,000 - 230,000; Full time

Job summary

Pride Global is seeking an experienced SOC Specialist in Malaysia to provide specialist-level expertise in advanced security monitoring, incident investigation, threat hunting, and detection engineering support. The role will drive major incident response, improve detection capabilities, and mentor SOC analysts across the environment.

The ideal candidate has 5–7+ years of hands-on SOC experience in enterprise settings, with strong KQL skills, Defender for Endpoint/XDR proficiency, and a track

Qualifications

• 5–7+ years of hands-on SOC/Cybersecurity experience.
• L2/L3 security monitoring and incident investigation experience.
• Experience in an enterprise SOC/MDR/MSSP environment.
• Strong hands-on experience with Defender XDR/Defender for Endpoint or equivalent EDR/XDR.
• Strong knowledge of KQL and data correlation.

Responsibilities

• Perform advanced investigation of complex, high-risk, escalated security incidents.
• Analyze events across SIEM, EDR/XDR, identity, network, email, cloud, firewall, proxy, and application logs.
• Correlate multiple data sources to establish attack timelines, entry points, affected assets, and scope.
• Investigate suspicious processes, PowerShell, persistence, credential abuse, lateral movement, privilege escalation, and data exfiltration.
• Conduct proactive threat hunting using IOCs, TTPs, behavioral indicators, threat intelligence, and MITRE ATT&CK.
• Validate threat intelligence indicators and assess their relevance to the environment.
• Review and tune SIEM analytics rules, detection logic, correlation rules, and alert thresholds.
• Identify detection gaps and recommend new security use cases.
• Support major incident response, containment, eradication, and recovery activities.

Skills

SOC/Cybersecurity experience

L2/L3 incident investigation

Threat hunting

SIEM (Microsoft Sentinel)

Defender XDR/ Defender for Endpoint

KQL

Incident response

Mentoring juniors

Communication skills

Tools

Splunk

QRadar

ArcSight

Palo Alto

Trellix

Logic Apps

SOAR

Job description

We are seeking an experienced SOC Specialist to provide specialist-level expertise in advanced security monitoring, complex incident investigation, threat hunting, detection engineering support, and technical escalation. The role will support major incident response, improve SOC detection capabilities, and provide technical guidance to SOC analysts.

Key Responsibilities

• Perform advanced investigation of complex, high-risk, and escalated security incidents.
• Analyze events across SIEM, EDR/XDR, identity, network, email, cloud, firewall, proxy, and application logs.
• Correlate multiple data sources to establish attack timelines, entry points, affected assets, and scope.
• Investigate suspicious processes, PowerShell, persistence, credential abuse, lateral movement, privilege escalation, and data exfiltration.
• Conduct proactive threat hunting using IOCs, TTPs, behavioral indicators, threat intelligence, and MITRE ATT&CK.
• Validate threat intelligence indicators and assess their relevance to the environment.
• Review and tune SIEM analytics rules, detection logic, correlation rules, and alert thresholds.
• Identify detection gaps and recommend new security use cases.
• Support major incident response, containment, eradication, and recovery activities.
• Perform RCA and recommend corrective/preventive actions.
• Provide technical guidance and mentoring to L1/L2 SOC analysts.
• Coordinate with infrastructure, endpoint, network, identity, cloud, and application teams for remediation.
• Prepare detailed technical investigation reports and maintain SOC playbooks and documentation.
• Participate in tabletop exercises, threat simulations, and incident-response testing.

Requirements

• 5–7+ years of hands-on SOC/Cybersecurity experience.
• Proven L2/L3 experience in security monitoring and incident investigation.
• Experience handling critical/high-severity incidents and technical escalations.
• Experience in an enterprise SOC/MDR/MSSP environment.
• Strong hands-on experience with Microsoft Sentinel or equivalent SIEM.
• Strong experience with Microsoft Defender XDR/Defender for Endpoint or equivalent EDR/XDR.
• Strong KQL knowledge and ability to independently query and correlate security data.
• Strong knowledge of:
• Endpoint and Network Investigation
• Email/Phishing Investigation
• PowerShell & Command-Line Analysis
• Lateral Movement & Privilege Escalation
• Persistence & Data Exfiltration
• Ability to build end-to-end attack timelines, determine scope and impact, identify true/false positives, and recommend containment/remediation actions.
• Strong technical documentation and communication skills.
• Ability to mentor junior analysts and provide technical recommendations.

Preferred

• Experience with Defender for Identity, Defender for Cloud, Entra ID, Purview, and Intune.
• Experience with SOAR, Logic Apps, Playbooks, and security automation.
• Experience with Trellix, Palo Alto, Splunk, QRadar, or ArcSight.
• Knowledge of UEBA, behavioral analytics, malware analysis, and digital forensics.
• Experience developing Sentinel analytics rules and advanced hunting queries.
• Knowledge of Azure/AWS/GCP security.
• Experience with SIEM/EDR migration or SOC transformation projects.
• Familiarity with Threat Intelligence Platforms (TIP).