SOC L2 Analyst

Job Overview

The SOC L2 Analyst is responsible for monitoring, analysing, and responding to security alerts through the SIEM console, ensuring daily security operations, reporting, and console administration run smoothly. The role also contributes to threat hunting activities using Active Discovery Models, working closely with asset owners, the SIEM console administrator, and ADR support to maintain a strong security monitoring posture.

Principal Duties & Responsibilities

Alert Monitoring & Analysis

• Monitoring of SIEM CONSOLE logs for alert detection.
• Alert analysis and taking necessary action on alerts.
• Alert follow-up with asset owners.
• General monitoring of the security environment.
• Update CI alerts in tracker.

Daily BAU Operations & Reporting

• Perform daily BAU activities.
• Update blocked IPs in the active list.
• Update the malware list.
• Handover mail to the next shift.
• Save daily reports (Observe IT Report, SSO Report, RDP, Threat Dashboard reports, etc.).
• Check logger back-up status.
• Prepare daily reporting.
• Address ad hoc requests.

SIEM Console Administration & Configuration

• Raise a ticket with the SIEM CONSOLE administrator if a health monitoring threshold alert is received.
• Prepare log baselines for new log source additions.
• Configure the SIEM console to collect logs from new log sources.
• Define automated scripts in the SIEM console for backups.
• Perform configuration on SIEM console devices.

Threat Hunting & Active Discovery Model (ADR)

• Be part of a specialised team with the skill sets required to perform threat hunting activities using Active Discovery Models.
• Perform investigation and analysis on Active Discovery model outputs.
• Perform daily checks on model status.
• Share findings with the customer via ticket or email.
• Create tickets with ADR support for model errors and track them through to closure

Job Specification

• 6-8 years of relevant experience
• Experience with SIEM CONSOLE
• Log analysis skills
• Monitoring skills
• Scripting skills
• Configuration skills
• Backup skills
• Reporting skills
• Ticketing system knowledge
• Log source configuration
• Automated script definition

Pay: RM6,000.00 - RM8,000.00 per month

Application Question(s):

• Do you have experience with SIEM Console
• How much is your expected salary
• How long is your notice period

Work Location: In person