SOC Analyst

About This Role

This SOC Analyst role is for a frontline defender who neutralizes threats in real-time, understanding the "why" behind an alert, not just the "what." You will hunt for anomalies, pivot through complex datasets, and orchestrate responses across a modern security stack.

Responsibilities

• Monitor security alerts from various sources (SIEM, EDR, Firewall, other network assets) to identify, prioritize, and investigate potential security incidents
• Utilize Splunk Enterprise Security and SPL (Search Processing Language) to build custom dashboards, correlate disparate data logs, and proactively hunt for stealthy adversaries
• Leverage CrowdStrike Falcon for real-time endpoint visibility, performing process tree analysis, host isolation, and remediation of malicious activity
• Perform regular Vulnerability Assessments, interpreting scan results to provide actionable remediation guidance to infrastructure teams
• Analyze Firewall logs (e.g., Palo Alto, Fortinet, or Cisco) to identify patterns of reconnaissance, lateral movement, or data exfiltration
• Own the incident response process from initial detection through to post-mortem reporting and root cause analysis

Requirements

• Bachelor
• Previous experience in cybersecurity, IT security operations, or a SOC environment preferred
• 2+ years of hands-on experience with Splunk Enterprise Security
• Proficient in writing complex SPL queries to filter noise and find the "needle in the haystack"
• Proven experience using CrowdStrike Falcon (or similar EDR tools) for threat detection, containment, and investigation
• Experience with tools such as Tenable/Nessus, Qualys, or Rapid7 to identify and prioritize system weaknesses
• Solid understanding of TCP/IP, DNS, and HTTP/S
• Ability to read and interpret firewall rules and packet captures (PCAP)
• Familiarity with the MITRE ATT&CK framework to map adversary tactics and techniques
• CompTIA CySA+, GIAC (GCIH/GCIA), or Splunk Core Certified Advanced Power User or any relevant security certification
• Ability to automate repetitive tasks using Python or PowerShell
• Experience monitoring environments in Kubernetes and/or public cloud (AWS, Azure & GCP)

Benefits

• Shift Allowance: RM300 fixed

Important Details

• Contract: 12 months, extendable
• Schedule: 07:00 am - 07:00 pm / 07:00 pm - 07:00 am

About the Company

As a SOC Analyst on this team, you aren't just a "ticket pusher." You are a frontline defender responsible for neutralizing threats in real-time. We are looking for a technical practitioner who understands the "why" behind an alert, not just the "what." You will hunt for anomalies, pivot through complex datasets, and orchestrate responses across a modern security stack.