SOC Analyst

This is a fully remote position, open to applicants in Malaysia.

📋 Description

• Oversee, assess, and analyze security alerts and events generated from SIEM, EDR, SSE, and WAF platforms.

• Conduct thorough investigations of security incidents from start to finish, encompassing triage, analysis, containment, eradication, and post-incident documentation.

• Coordinate with relevant teams throughout the incident investigation process.

• Assess the scope, severity, and impact of security events.

• Distinguish true positives from false positives and escalate confirmed incidents as necessary.

• Implement response actions such as isolating endpoints, blocking indicators, disabling compromised accounts, and enforcing access restrictions.

• Ensure organized shift handovers across regions utilizing the follow-the-sun model.

• Proactively hunt for threats across endpoint, network, and log data using frameworks such as MITRE ATT&CK.

• Refine SIEM correlation rules, EDR custom detections, and WAF rules.

• Enhance investigations with threat intelligence.

• Create and maintain technical documentation, standard operating procedures, and incident response playbooks.

• Collaborate with IT, infrastructure, application, and security engineering teams.

• Assist with vulnerability management and the ongoing improvement of the security posture.

• Report directly to the SOC Lead.

⛳️ Requirements

• A Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field, or equivalent practical experience.

• A minimum of 3 years of hands-on experience as a SOC Analyst, triaging alerts and investigating security incidents within a production environment.

• Strong working knowledge of EDR, SSE, SIEM, and WAF technologies.

• Experience in incident response and threat hunting, preferably with knowledge of the MITRE ATT&CK framework.

• Comprehensive understanding of network security, endpoint security, cloud security, and Zero Trust principles.

• Excellent analytical, troubleshooting, and problem-solving abilities with a keen attention to detail.

• Capability to manage sensitive information in a responsible and secure manner.

• Proficient written and verbal communication skills in English.

• Ability to work effectively with both technical and non-technical teams across different time zones.

• Relevant certifications such as Security+, CySA+, GCIA, GCIH, BTL1, or vendor-specific credentials are advantageous.

• Practical experience implementing, configuring, and fine-tuning security platforms or creating and adjusting detection content is a plus.

🏝️ Benefits

• Fully remote work environment.

• Global follow-the-sun team structure.

• Opportunity to collaborate with international talent and fintech experts.

• Professional growth through engagement with cutting-edge blockchain, security, and digital finance technologies.