SNOC L2

Position Overview

The Security Operations Engineer (L2) is responsible for advanced monitoring, analysis, and

response to security incidents, alongside conducting technical security assessments such as

Vulnerability Assessment and Penetration Testing (VAPT), Security Posture Review, and

Threat Hunting. This role acts as the second line of defence within PLTPRO’s SNOC

environment, ensuring the protection of enterprise and client infrastructures, including Data

Centre, Cloud, Co-location, SIEM, Logging, and Purple Team services.

This position also required security engineering role to perform on-site troubleshooting and

deployment for Cybersecurity related services when needed with light traveling expected

Key Responsibilities

• Monitor and triage alerts generated by SIEM, IDS/IPS, firewalls, and EDR/XDR platforms.
• Perform L2 analysis and correlation of security events to identify threats and potential compromises.
• Escalate confirmed incidents to L3/Incident Response Team with detailed investigation notes.
• Conduct threat hunting and anomaly detection using SIEM and threat intel feeds.
• Support the Incident Response (IR) process: containment, eradication, recovery, and post-incident reporting.
• Provide necessary support and guidance to L1 in triage and incident management until case closed.
• Create, edit, and review monthly reports.
• Perform Vulnerability Assessment & Penetration Testing (VAPT) when assigned.
• Collaborate with customer, technical, IT and DevOps teams to close vulnerabilities and improve system hardening.
• Conduct Security Posture & Compliance Assessment (SPA/CA) for clients against industry CSF and standards.
• Assist remediation assessment and verification.
• Report duty and important escalation to Operations manager and Head of Cybersecurity for high severity incident.

Qualifications & Requirements

• Bachelor’s Degree in Cybersecurity, Computer Science, or related field.

• 2–4 years’ experience in SOC, Incident Response, or Security Engineering.

• Strong knowledge of SIEM platforms (Elastic, Wazuh, Graylogs, Syslogs API)

• Experience with vulnerability scanners (Nessus, OpenVAS, Qualys) and penetration tools (Burp Suite, Metasploit, Nmap, Kali Linux).

• Understanding of frameworks: ISO 27001, NIST CSF, CIS, MITRE ATT&CK, PDPA Malaysia.

• Strong documentation and analytical skills. Preferred Certifications

• CompTIA Security+ / CySA+ • CEH / eJPT / OSCP

Pay: RM4,000.00 - RM5,000.00 per month

Application Question(s):

• Do you have experience in networking?
• Do you have experience as L2?

Work Location: In person