SOC ANALYST

Hi Good Day ,

This is Leena from JMA. As discussed, please find the job details and job description below for your reference.

Position: Logicalis Malaysia

Employment Type: Contract – Logicalis – Payroll under JMA GLOBAL IT Solutions

Working Hours: Monday to Friday, 9:00 AM – 6:00 PM

Location: Ara Damansara

Level 2 Resident Engineer – Sime MSOC Project

Role Overview

The Level 2 Resident Engineer (RE) acts as the bridge between Sime Darby’s on-site IT teams, DXC and the Logicalis GSOC, providing advanced incident handling, containment execution, and escalation management. Unlike Level 1 engineers, the L2 RE will focus on technical deep-dive analysis, containment actions and advanced tool management, ensuring that incidents are swiftly triaged, contained, and escalated as per MSOC procedures.

Key Responsibilities

Incident Response & Containment

• Execute initial containment actions (as per GSOC-approved playbooks) for Critical and High alerts, including:
• Isolating endpoints via Defender Portal .
• Blocking malicious IPs/domains via Defender Portal.
• Disabling compromised user accounts in Azure AD/Entra ID.
• Escalate to GSOC L3,DXC and Sime IT teams for complex containment requiring infrastructure changes.
• Document containment steps in the ITSM system with full audit trail.

Security Event Analysis

• Perform deeper investigation on escalated alerts from L1 engineers.
• Correlate multi-vector events (endpoint, firewall, SIEM logs, vulnerability scans).
• Validate false positives and fine-tune rules/playbooks with GSOC support.
• Conduct root cause identification and propose preventive actions.

Threat Intelligence & Hunting

• Leverage integrated threat intel feeds (Cyble TI & Microsoft TI).
• Conduct targeted hunts based on IOCs/TTPs received from GSOC integrated threat intel feeds.
• Provide localized context (business processes, entity-specific exposure).

Security Tool Operations

• Support GSOC platform engineers in log source onboarding validation and health checks.
• Assist in playbook testing and automation validation.

Compliance & Reporting

• Ensure incident tickets meet SLA requirements (MTTR, containment SLA ≥ 95%).
• Produce weekly/monthly reports on incident trends, false positives, and containment actions.
• Support audit and compliance evidence gathering (ISO 27001, NIST CSF etc..)

Collaboration & Escalation

• Work closely with DXC & Sime IT infra/app teams for remediation.
• Coordinate with GSOC L3 engineers for advanced forensics and malware reverse engineering.
• Act as the primary Sime liaison during major incidents, ensuring smooth communication.

Qualifications & Skills

• Bachelor’s in Cybersecurity, Computer Science, or related field.
• 3–5 years SOC experience, with proven L2/L3 analysis exposure.
• Strong knowledge of SIEM, XDR, EDR, firewalls, IAM, and vulnerability management.
• Hands-on experience with Microsoft Sentinel, Defender and Tenable IO.
• Relevant certifications: GCIA, GCED, GCIH, MS Security Engineer, or equivalent.
• Strong communication, stakeholder management, and documentation skills.

Location

• On-site located at Motors City premises.

Role’s Out of Scope

• Advanced threat hunting & reverse engineering (handled by GSOC L3).
• Platform engineering & log onboarding (handled by GSOC Engineering team).

If you have any questions or need further clarification, feel free to reach out and looking forward to your response.

Please send me your updated resume with the details below.

Full Name as per I.C./PASSPORT

Position Title

Summary of Experience:

Total experience

Total Relevant Experience

Current Salary: Breakdown into :

Basic Salary :

Allowance :

Expected Salary Per Month

Notice period (Actual NP /Negotiable NP)

Current location

Reason to Change (Job and Location)

Holding Any Other Offers (If yes, Mention offer details)

Waiting for any final round interview

Nationality:

Marital Status

I.C. Number/ Passport Number

Employment pass validation :

Thanks & Best Regards,

Morleena Devasagayam

Talent Acquisition Group- Information Technology

JMA Global IT Solutions Sdn. Bhd.

Web: www.jmait.my

Email: [email protected]

Desk Number : Malaysia(+6032713 8275/76 -Ext No : )

Mobile Number : +6013-3458442

Kuala Lumpur: Suite 33-2, Q Sentral, No. 2A, Jalan Stesen Sentral 2, Kuala Lumpur Sentral ,50470 -Kuala Lumpur Malaysia

Singapore, India.

Pay: RM5,000.00 - RM9,000.00 per month

Benefits:

• Health insurance
• Opportunities for promotion
• Professional development

Education:

• Diploma/Advanced Diploma (Preferred)

Experience:

• SOC/ SENTINEL ONE: 3 years (Preferred)

Willingness to travel:

• 50% (Preferred)

Work Location: In person