IT SOC Analyst

Job Description: SOC Analyst
Location: Malaysia
Job Type: Full-Time
Industry: IT Security

About the Role
We are seeking a detail-oriented and skilled SOC Analyst to join our Security Operations Center (SOC) team. The successful candidate will monitor, analyze, and respond to cyber threats, ensuring the organization’s IT infrastructure and data are safeguarded against potential security incidents. This role involves working collaboratively within the SOC to enhance security posture and mitigate risks.

Key Responsibilities

1. Threat Monitoring and Analysis
- Continuously monitor security events, logs, and alerts from multiple sources, including intrusion detection/prevention systems (IDS/IPS), firewalls, endpoint protection tools, and SIEM platforms.
- Perform real-time analysis of security alerts and determine if incidents are genuine threats.

2. Incident Response
- Investigate security incidents, document findings, and coordinate with relevant stakeholders to ensure timely resolution.
- Contain and mitigate security threats to prevent escalation and minimize impact.

3. Vulnerability Management
- Conduct regular vulnerability scans and risk assessments.
- Work with teams to implement remediation measures for identified vulnerabilities.

4. Documentation and Reporting
- Prepare and deliver detailed reports on security incidents, events, and trends to management.
- Maintain accurate records of all incidents and their resolutions.

5. Collaboration and Training
- Work closely with IT, application, and infrastructure teams to design secure solutions.
- Stay updated on the latest cybersecurity trends, tools, and techniques and share knowledge with the team.

Qualifications and Skills

- Educational Background:
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.

- Experience:
- Minimum 1-3 years of experience in a SOC, IT Security, or related role.
- Hands-on experience with SIEM tools (e.g., Splunk, QRadar, or ArcSight).

- Technical Skills:
- Strong understanding of network protocols, operating systems (Windows/Linux), and security architectures.
- Familiarity with tools such as IDS/IPS, endpoint detection, and malware analysis tools.
- Knowledge of scripting and automation (Python, PowerShell) is an advantage.

- Certifications:
- Preferred: CompTIA Security+, CEH, GIAC certifications, or equivalent.
- Advantageous: CISSP, CISM, or advanced SOC-related certifications.

- Soft Skills:
- Strong analytical and problem-solving skills.
- Excellent communication and teamwork abilities.
- Ability to work in a fast-paced, high-pressure environment.