Senior Security Analyst

Senior Security Analyst in Kuala Lumpur at Logicalis

As Architects of Change, Logicalis' focus is to design, support, and execute clients' digital transformation by uniting their vision with their technology expertise and industry insights. The company, through its deep understanding of key IT industry drivers such as security, cloud, data management, and IoT, can address customer priorities such as revenue growth, operational efficiency, innovation, risk and compliance, data governance, and sustainability.

Accountabilities:

• Actively research and stay updated with latest and new cyberattacks, TTPs, threat attackers, vulnerabilities and perform proactive threat hunting in customer environments.
• Understand customer environments to develop use cases based on industry, targeted attacks, vulnerabilities, attack vector, threat landscape, TTPs etc., for the scope of monitoring.
• Develop identification and documentation of Indicators of Compromise (IOCs).
• Ability to perform malware reverse engineering on the detected malware file to investigate and identify its potential entry points.
• Perform forensic analysis and investigations leveraging SOC solutions and provide evidence in case of breaches.
• Handle security incidents tickets escalated by Level II team and draft security incident report covering the root cause, forensic evidence, and recommended mitigation plans.
• Escalate complex incidents to higher-level teams, ensuring proper documentation and reporting.
• Strong understanding of MITRE ATT&CK framework, and ability to operationalize it for day-to-day SecOps activities, to develop tactics, techniques, procedures (TTPs) for security analysis and threat hunting. Collaborate with other security teams to enhance the detection and mitigation of emerging threats.
• Perform SIEM/EDR rule fine-tuning to minimize false positive alerts and enhance detection accuracy for MSS SOC.
• Review 3rd party threat intel feeds and integrate them into MSS platforms to provide value to our customers.
• Identify gaps in existing SOC processes and work with team members or other departments to create, modify standard operating procedures, to automate any mundane daily operational activities, ensuring Ops are run efficiently.
• Provide guidance and mentoring to junior SOC analysts, supporting their growth and knowledge development. Enable regional security analysts to deliver seamless support locally by developing SOC playbooks and relevant Knowledge base.
• Lead regional security analysts in handling incidents, customer escalations and requests, SLA (Service Level Agreement) requirements.
• Stay updated on the latest security trends, vulnerabilities, and attack techniques to improve incident response capabilities.

The Individual and their Experience:

• Advantage if have hands-on experience in performing vulnerability assessments and presenting to customer business teams.
• Familiarity with threat hunting techniques and proactive security measures.
• Expertise in network security technologies such as firewalls, IDS/IPS, and VPNs.
• Strong understanding of cyberattack tactics, techniques, and procedures (TTPs), including familiarity with frameworks like MITRE ATT&CK.
• Experience with cloud security platforms (e.g., AWS, Azure, Google Cloud).
• Knowledge of compliance standards and frameworks (e.g., GDPR, NIST, PCI-DSS).
• Strong troubleshooting skills with the ability to analyze and resolve complex security incidents.
• Experience in Forensics and Incident Response, penetration testing, and report drafting.
• Advanced knowledge of SIEM tools (e.g., QRadar, Splunk) and threat intelligence platforms.
• Familiarity with scripting languages (e.g., Python, PowerShell) for automation and incident response.
• Multilingual proficiency (e.g., Mandarin, Cantonese, Bahasa Malayu) for effective communication in global environments.