Security Analyst

Who is LRQA Nettitude?

Founded in 2003, LRQA Nettitude is an award-winning global provider of cybersecurity services, bringing innovative thought leadership to the ever-evolving cybersecurity marketplace. Through our research and innovation, we provide threat-led services that span technical assurance, consulting, and managed detection and response offerings.

We are driven by a desire to build and deliver the best cybersecurity propositions in the industry and stay abreast of the evolving legislative and regulatory landscape. This helps our clients to prioritize their cybersecurity risks, enabling them to focus on the activities that are core to their business.

About Nettitude:

At LRQA Nettitude our focus has always been on excellence in cyber security. We have teams that offer world-class services in red teaming, penetration testing, threat intelligence, research and development, detection and response, governance, risk, and compliance, and plenty more. Our business is global and so are our clients. We work closely with central banks, central and local government, critical national infrastructure, large retailers, and plenty more besides!

We’re an award-winning provider of cyber security services and we are at a very exciting stage of development. We are looking for the right people to join us as we embrace the challenges thrown up by the advancements within the IT industry and within the threats faced. You can find out more about us at www.nettitude.com.

Role Overview:

Working as a key member of our SOC 24x7 shift team, you will use your expertise to detect and respond to a multitude of threats of differing capability and sophistication. You will use SIEM, EDR, Network Monitoring, bespoke tooling and Threat Intelligence solutions to triage suspicious events, provide context and an assessment of risk/threat to customers to enable efficient response and continuously monitor customer environments.

Location:

This role is based in Malaysia. The role is hybrid-based and will be required to work in shifts.

What you’ll be doing in your role:

• Operate as part of the 24x7 SOC Monitor Team, providing proactive defensive monitoring to clients of all shapes, sizes, and industries.
• Generate detailed, jargon-free incident reports from your investigations within service level agreements, and with applicable recommendations, mitigations, and remediations.
• Maintain regular verbal and written communications with stakeholders, representing Nettitude internally and externally as required.
• Create high-standard management and operational reports in a timely, concise, and actionable manner.

Key Skills:

• Ability to analyze complex datasets and provide sensible recommendations.
• Initiate and develop concepts into solutions.
• Document and explain technical concepts clearly.
• Familiarity with networking foundations and enterprise device types.
• Knowledge of incident management and problem handling in a security operations environment.
• Experience with SIEM, EDR, EPP, AV, and Netmon tools.
• Understanding of attack vectors and ability to recommend countermeasures.
• Proficiency in communicating with stakeholders at different levels.
• Familiarity with offensive tools, techniques, vulnerabilities like Kali, Lolbins, and fileless malware.

Key Performance Indicators:

• Complete assigned reports within time and quality standards.
• Complete any other assigned work to time and quality standards.
• Develop and maintain documentation of processes, investigations, and use-cases (including design specifications, diagrams, and documentation for users).
• Complete all case files on time and with accurate and timely data/results.
• Ensure projects are completed within scope and specification.
• Operate within, and consistently display the LRQA Nettitude values of vision, integrity, togetherness, ambition, and expertise.
• Perform to the SFIA level 3 competencies across business skills, autonomy, influence, and complexity of work.
• Adhere to analyst best practice, core competencies, compliance, and process/procedure standards.
• Adhere to LRQA Nettitude policies and procedures, as detailed in the ‘Policies & Procedures’ sections of the Nettitude intranet.

What we offer:

We are a people-focused, high-performing, high-trust managed security services team. We pride ourselves on our investment in our people, meaning as we are a fast-evolving team in an exciting working environment, you’ll always have opportunities to solve the latest cybersecurity challenges, with the responsibility and development opportunities to match.

Diversity and Inclusion at LRQA:

We are on a mission to be the place where we all want to work and we are passionate about embracing different perspectives because we understand the value this brings to our business, our clients, and each other. We are all about creating a safer and more sustainable future and our inclusive culture is right at the heart of our business.

Together our employees make our communities better and we want you to be part of our diverse team!

LRQA is a leading global assurance provider. The integrity and expertise we bring to our partnership with clients support their journey to a safer, more secure, and more sustainable future.