SOC Analyst

Contract: 12 months, extendable

Location: Subang Hitech, Shah Alam

Basic Salary: RM3000 and above

Shift Allowance: RM300 fixed

Job Description

As a SOC Analyst on this team, you aren't just a "ticket pusher." You are a frontline defender responsible for neutralizing threats in real-time. We are looking for a technical practitioner who understands the "why" behind an alert, not just the "what." You will hunt for anomalies, pivot through complex datasets, and orchestrate responses across a modern security stack.

Key Responsibilities:

● Continuous Monitoring & Response: Monitor security alerts from various sources (SIEM, EDR, Firewall, other network assets) to identify, prioritize, and investigate potential security incidents.

● Advanced Threat Hunting: Utilize Splunk Enterprise Security and SPL (Search Processing Language) to build custom dashboards, correlate disparate data logs, and proactively hunt for stealthy adversaries.

● Endpoint Defense: Leverage CrowdStrike Falcon for real-time endpoint visibility, performing process tree analysis, host isolation, and remediation of malicious activity.

● Vulnerability Management: Perform regular Vulnerability Assessments, interpreting scan results to provide actionable remediation guidance to infrastructure teams.

● Network Security Oversight: Analyse Firewall logs (e.g., Palo Alto, Fortinet, or Cisco) to identify patterns of reconnaissance, lateral movement, or data exfiltration.

● Incident Lifecycle Management: Own the incident response process from initial detection through to post-mortem reporting and root cause analysis.

Requirement

Skills and Qualifications:

● Education: Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent work experience).

● Experience: Previous experience in cybersecurity, IT security operations, or a SOC environment preferred.

● Technical Skills:

● SIEM Mastery: 2+ years of hands-on experience with Splunk Enterprise Security. You must be proficient in writing complex SPL queries to filter noise and find the "needle in the haystack."

● EDR Expertise: Proven experience using CrowdStrike Falcon (or similar EDR tools) for threat detection, containment, and investigation.

● Vulnerability Assessment: Experience with tools such as Tenable/Nessus, Qualys, or Rapid7 to identify and prioritize system weaknesses.

● Network & Infrastructure: Solid understanding of TCP/IP, DNS, and HTTP/S. Ability to read and interpret firewall rules and packet captures (PCAP).

● Framework Knowledge: Familiarity with the MITRE ATT&CK framework to map adversary tactics and techniques.

● Certifications: CompTIA CySA+, GIAC (GCIH/GCIA), or Splunk Core Certified Advanced Power User or any relevant security certification.

● Scripting: Ability to automate repetitive tasks using Python or PowerShell.

● Cloud Security: Experience monitoring environments in Kubernetes and/or public cloud (AWS, Azure & GCP)

Work Location: Subang Hitech

Work Hours: 07.00 am - 07.00 pm / 07.00 pm - 07.00 am

Pay: RM2,800.00 - RM3,000.00 per month

Work Location: In person