SOC Analyst L2

Job Description – Cybersecurity Analyst

Team: Monitoring/Support

Designation: Cyber Security Analyst

Job Role: Monitor and Detect Security Alerts while supporting Microsoft security and compliance technologies based on customer requirements and industry knowledge.

Experience: Minimum 3 to 5 years of experience working in a Security Operation Centre in terms of monitoring, detecting, and analyzing security solutions.

Job Location: Cyberjaya, Selangor, Malaysia

Shifts: The resource will have to work from the office (Mandatory) and come in a 24x7x365 rotational shift.

Role

The Cybersecurity Analyst will report to the DFIR Lead or SOC Manager as part of the Cyber Defence Center at vCyberiz office in Bangalore. The primary function is to monitor, detect, and analyze security alerts and provide resolution based on alert diagnosis.

Responsibilities

1. Perform health checks on security solutions regularly and help detect incidents before there is any impact.
2. Monitor and measure system resources, and if needed, resolve issues related to security incidents related to emails, changes, and problem tickets.
3. Provide inputs to technical documents based on repeat incidents and help assist SMEs during problem resolution.
4. Troubleshoot security-related service issues as they occur and follow up with after-action reviews.
5. Follow Incident, Request, Problem, Change, and Access Management processes based on ITIL and our IT-service management tool.

Experience

Experience in designing, implementing, supporting, and delivering security solutions such as Microsoft Security and Compliance solutions including M365 Defender for Endpoint, Defender for Cloud, MS Purview, MS Entra, Sentinel SIEM, DLP, Email and Web Security, SPAM filtering, Vulnerability Scanning, etc.

Requirements

1. Have good experience in Microsoft Security and Compliance (Mandatory).
2. Experience with Sentinel SIEM.
3. Good understanding of ticket management and service requests.
4. Should have implemented solutions for global customers.
5. Good understanding of Security Operations and Service Delivery.
6. Awareness and expertise of using at least one Enterprise Ticketing system such as Service Now.
7. ITIL v4 processes in supporting Security Solutions and Service Delivery.

Qualifications (Mandatory)

1. Engineering Degree in Computer Science or Technical Degree with certifications in Information Technology or Information Security.
2. Excellent English communication skills.

Qualifications

1. Cisco certifications such as CCNA.
2. Technical Certifications such as SC-200, SC-100, SC-400, AZ-900.

Skills And Abilities

1. Good command in English; other foreign languages are a plus.
2. Good cross-cultural communication skills.
3. Ability to lead a team of security specialists and analysts.
4. Ability to interact with various teams and customers.
5. Be a Team Player and Fast Learner.
6. Share best practices and proactively suggest continuous improvement.
7. Escalate operational issues to management when needed.
8. Willing to work in 24x7 shifts.

Performance Criteria

1. Security Delivery team meets the agreed Service Level with customers.
2. Help to keep Service Delivery documentation up to date.