Cyber Security Analyst

Location: Krungthep Kreetha

Website: https://www.bgrimmpower.com/en/home

JOB SUMMARY

The Cyber Analyst (SOC) plays a key role in protecting B.Grimm’s IT and OT environments by monitoring security events, investigating suspicious activity, and responding to potential threats. Working within B.Grimm’s in-house Security Operations Centre (SOC), the role is responsible for real-time alert analysis, threat triage, and initial incident handling to ensure the security and continuity of operations, including critical power-plant systems.

We expect you to have strong analytical thinking, an understanding of modern cyber threats, and the ability to operate EDR and SIEM tools efficiently under pressure

DUTIES AND RESPONSIBILITIES

• Monitor security alerts 24/7 using SIEM, EDR and threat-intelligence platforms.
• Investigate suspicious activity across servers, endpoints, networks and OT gateways to identify malicious behavior.
• Perform triage of alerts, prioritize incidents based on severity and potential operational impact, and escalate when required.
• Conduct initial containment actions for minor security incidents following approved playbooks.
• Collaborate closely with the Incident Response team on major or complex cases.
• Maintain accurate and complete documentation of incident handling activities and investigation results.
• Support tuning of SOC detections to reduce false positives and improve accuracy.
• Participate in vulnerability analysis, threat hunting, and continuous monitoring improvements.
• Assist in creating and maintaining SOC runbooks and escalation procedures.
• Promote user awareness by reporting recurring issues and contributing to training materials.

JOB SPECIFICATION

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering or a related field.
• 1–3 years of experience in SOC operations, cybersecurity, IT security, or system/network administration (fresh graduates with strong cyber skills may be considered).
• Basic to intermediate knowledge of SIEM, EDR, firewalls, networking and security monitoring concepts.
• Understanding of malware behavior, common attack techniques and incident response fundamentals.
• Strong analytical and problem-solving skills with attention to detail.
• Ability to document findings clearly and communicate effectively with technical and non-technical teams.
• Ability to work in shifts as part of a 24x7 security monitoring operation.
• Proficient in spoken and written English.