SOC Senior Analyst (TT)

Job Overview

The SOC Senior Analyst (TT) is responsible for ensuring SLA compliance for alert handling, maintaining SOC detection content and knowledge base, and supporting daily SOC operations, reporting, and backup monitoring. The role also provides guidance to SOC L2 Analysts, supports the SOC Leader with management reporting, and contributes to advanced investigations, malware engineering, and threat analysis.

Principal Duties & Responsibilities

SLA, Monitoring & Alert Support

• Check if SLA has been met for alert alerting and alert closure.
• Monitor SIEM CONSOLE logs on a daily basis for alert detection.
• Provide support to SOC L2 Analysts in the alert investigation process.
• Participate in alert drills.
• Escalate events to the Investigator if a SOC Specialist is unable to analyse an alert.

Reporting & Documentation

• Prepare the Daily Status & Monthly MIS report and submit to the SOC Lead for review.
• Complete the SOC Turnover Status Report sheet.
• Assist the SOC Leader in SOC-related work and management reporting.
• Update and maintain the SOC knowledge base for new alerts.

Threat & Detection Rule Management

• Develop and implement threat cases for new global threats.
• Review advisories and implement necessary detection measures.
• Perform risk analysis / pilot testing for new scheduled report or rule requests.
• Add, modify, or delete scheduled reports based on approved change requests.
• Update the list of reports and inform requestors of changes.
• Update the list of alerts and inform requestors of changes.
• Define threat cases and reports for newly added log sources.

Backup & Log Source Monitoring

• Verify the status of the daily automated backup job and raise a ticket if the backup has failed.
• Raise an alert ticket if a log source stops sending logs.

Investigation & Advanced Analysis

• Perform malware engineering, attack analysis, and flow analysis.
• Support the team in critical and complex investigations to identify underlying threats and provide relevant artefacts.

Job Specification

• 5 years of relevant working experience
• Experience with SIEM CONSOLE
• Knowledge of threat analysis
• Ability to perform risk analysis
• Experience with malware engineering
• Understanding of attack analysis
• Familiarity with flow analysis
• Ability to analyze alerts
• Experience with log source management
• Knowledge of report creation and modification
• Understanding of backup and recovery processes

Pay: RM5,000.00 - RM6,000.00 per month

Application Question(s):

• Do you have experience with SIEM Console
• How much is your expected salary
• How long is your notice period

Work Location: In person