SOC Incident and Alert Consultant

5 months ago

Kuala Lumpur, Malaysia Arvato Systems Malaysia Sdn. Bhd. Full time

**Job Highlights**:

- Sponsored meals if you work at the office
- We championed hybrid work arrangement.

Serves as a contact person to users for cyber security issues, mainly engages in real-time (threshold) security monitoring, event evaluation, alert triage, and incident response. Identifies/filters false positives for process optimization. Responsible for verification, assessment, and classification of reported Cyber Security incidents. Communicates incident remediation status and escalates to relevant parties.

Handles incidents according to response plans/runbooks and escalates incidents to related parties, tier 2 or tier 3 for remediation. Reviews incidents after closure for potential defense and process improvements. Supports discovery, configuration, and vulnerability scanning. Work on service request tickets by receiving and handling requests for service, following agreed procedures. (Including set up new user's accounts, give access to certain software, network folder, etc.)
- Manage incident response including incident detection, analysis, containment, eradication, recovery, and chain of evidence/ forensic artifacts required for additional investigations.
- Conduct thorough checklist-based investigation of security events generated by detection mechanisms such as SIEM, IDS/IPS, AV.
- Categorize the events and raise necessary incidents after a thorough quality check of the event.
- Utilize advanced network and host forensic tools to triage and scope an incident.
- Perform investigation and analytics of network, host-based payloads and artifacts concerning the incident.
- Correlate additional context from the Threat Intelligence (TI) team for the incident during investigation and analysis.
- Participate in Vulnerability Management processes.
- Create recommendations and requirements for content detection and response, enhancements to SOC process & procedures and systems.
- Provide technical support for forensics services to include evidence seizure, computer forensic analysis and data recovery, in support of computer crime investigation.
- Work as part of a team to ensure that corporate data and technology platform components are safeguarded from known threats.

**Job Qualifications:
- Demonstrates a broad awareness of cybersecurity events, threats, and actors, including trends and emerging systemic risks.
- Basic understanding of Operating Systems, Virtualization technologies, Network Devices, Cloud computing concepts, Web Proxies, Firewalls, Intrusion Detection/Prevention Systems, Antivirus Systems, Data Loss Prevention, Vulnerability Assessment tools.
- Strong understanding of security incident management, malware management and vulnerability management processes.
- Ability to follow through on all phases of the incident response and identify attacks, determine initial vectors, and complete scope of incidents.
- Experience in troubleshooting in a technical environment as well as basic forensics tools and web history tools.
- Excellent English written and verbal skills.
- Security monitoring experience with SIEM technologies (e.g. IBM QRadar, Splunk, Sentinel, ManageEngine or SolarWinds).

**Personal Qualities**:

- Innovative and eager to learn in a rapidly evolving field
- Personality traits, work habits, communication, and social skills are necessary to work effectively within a dynamic and highly operational environment.
- Exemplary personal and professional integrity and demonstrate strong interpersonal skills.
- Excellent analytical and problem-solving skills with strong attention to detail
- Ability to manage multiple tasks, priorities, and operational assignments in a high-pressure environment.
- Must have good time management skills with a demonstrated ability to complete assignments in a timely, high-quality manner.
- Shift work and/or Stand-by/on-call availability required
- Working Conditions & Compensation

**Shift work required**
- On-call/stand-by availability required
- Travel: n/a - possibly rarely
- Security Operation Center positions require employees to obtain and maintain a security clearance.
- Life at Arvato Systems Malaysia:
If you're looking to be creative and at the same time putting on the entrepreneurship hat while working on Technology related work, then you fit right into our culture.

**Top 10 Perks & Benefits on Why You Should Join Us**:

- Yearly Company Trip.
- We promote flexi work arrangements having flexi benefits where employees could enjoy what they see fit.
- Besides Annual Leaves & Sick Leaves, we have other unique paid time-offs such as Birthday Leave & Child Care/Parental Leave.
- We got you covered in terms of insurance alongside with your immediate family members (Spouse & Children only).
- Attractive Employee Referral Program.
- Sponsored meals if you work at the office
- Unlimited coffee refills with state-of-the-art barista coffee machine where you can practice on your preferred choice of latte art.
- Believes in learning and people development

  • SOC Incident

    5 months ago

    Kuala Lumpur, Malaysia Arvato Systems Malaysia Sdn. Bhd. Full time

    Serves as a contact person to users for cyber security issues, mainly engages in real-time (threshold) security monitoring, event evaluation, alert triage, and incident response. Identifies/filters false positives for process optimization. Responsible for verification, assessment, and classification of reported Cyber Security incidents. Communicates incident...

  • Aws Expert

    4 months ago

    Kuala Lumpur, Malaysia Hytech Full time

    **Job Highlights** - Unique Opportunity for Career & Self Development - Young & Energetic Culture - Positive working environment We’re currently seeking certain highly technical SOC engineers (Cyber, AWS, API, Python) to deliver a range of technical SOC support and development As SOC engineer (Cyber, AWS, AWS Security Product, AWS security Hub, API,...

  • SOC Incident

    5 months ago

    Kuala Lumpur, Malaysia Arvato Systems Malaysia Sdn Bhd Full time

    Arvato Systems specializes in IT solutions for Digital Transformation with over 3,000 staff in 25 locations around the world including Asia, Europe and North America. The Arvato Systems team develops the IT solutions and smart srvices that make our clients more agile and more competitive, enabling them implement innovative business models. We integrate and...

  • Security Operations Center

    4 months ago

    Kuala Lumpur, Malaysia Eames Consulting Full time

    Security Operations Center (SOC) Lead Are you a seasoned cybersecurity leader with a passion for driving excellence and safeguarding digital assets? Our client, a leading cybersecurity consultancy firm is looking to hire a lead to look after the Security Operations Center (SOC) in Asia Pacific. You will be responsible in, - Driving strategic leadership...

  • Technical Support/ SOC Trainee

    5 months ago

    Kuala Lumpur, Malaysia Ssquad Global Full time

    **Full Job Description** **Job Title**: Technical Support/ Service Engineer/ SoC Trainee **Location**: Kuala Lumpur, Malaysia **Experience**: Freshers **About Us**: Ssquad is a leading company in the hardware and software business, committed to delivering top-quality products and services to our clients globally. We are looking for a skilled Procurement...

  • Security Operation Center Soc

    5 months ago

    Kuala Lumpur, Malaysia Net2source LLP Full time

    **Required skills**: - 2-5 Years of Experience in SOC - Familiarity and experience in implementation of or two SIEM products (Log Rhythm, QRadar, SA, Sentinel, Arc sight etc). - Install / configure / build / fine-tune the SIEM tools to setup an effective information security support - Establish KPI, review & manage security logs and provide reports based on...

  • SOC Analyst L2

    5 months ago

    Kuala Lumpur, Malaysia SSquad Global Full time

    **Job Purpose**: As a Security Analyst L2, they will be responsible for operationalization of new security platforms to enable Security Operations Center to stay ahead of emerging and current threats. They will utilize data analytics, threat intelligence, and your experience to leverage new and existing technologies to build the use cases that drive security...

  • Cyber Security Incident Responder

    5 months ago

    Kuala Lumpur, Malaysia Eames Consulting Full time

    Analyzing and responding promptly to security alerts - Supervising assigned Incident Response engagements - Contributing to internal tool innovation for enhanced cybersecurity capabilities - Collaborate with relevant stakeholders to enhance the functionality of security controls Requirements, - Minimum 6 years in a technical scope performing Incident...

  • Security Operations Center

    5 months ago

    Kuala Lumpur, Malaysia Hatch Asia Consulting Pte Limited Full time

    “Unifying Purpose, Shaping Careers”. We believe in a world where organisational strategies are brought to life; when everyone finds value in their work by aligning corporate purpose with people, where we inspire a meaningful and impactful future. Our client is a global fast-food restaurant chain that specializes in delivery and takeout services. They...

  • SOC Analyst Level 2

    5 months ago

    Kuala Lumpur, Malaysia Juhler Professionals - a Division of Temp-Team Pte Ltd Full time

    **My Client established since 2016**, a global Managed Security Services Provider (MSSP) and leader in Managed Detection and Response (MDR), provides always-on cybersecurity protection services. Our 24x7 security operations centers (SOC) help clients detect and respond to critical threats and prevent the risk of a security breach. **Consultation...

  • SOC Analyst

    5 months ago

    Kuala Lumpur, Malaysia Orange Business Full time

    **About the role**: The SOC analyst serves in one of our CyberSOC teams and conducts cyber security investigations and work with peers on incident response. The SOC Analyst is expected to stay up-to-date with emerging security threats and containment techniques, by collaborating with our Threat Intelligence team and CERT. As a SOC Analyst, you'll be...

  • Cyber Security Analyst

    5 months ago

    Kuala Lumpur, Malaysia Wipro Limited Full time

    Kuala Lumpur, Malaysia - Tech Hiring - 3072035 **Job Description**: **SOC Consultant (L1 Level)** - Location: Kuala Lumpur, Malaysia **Required skills**: - 2-5 Years of Experience in SOC - Familiarity and experience in implementation of or two SIEM products (LogRhythm, QRadar, SA, Sentinel, Arcsight etc). - Install / configure / build / fine-tune the SIEM...

  • Cyber Security Analyst

    5 months ago

    Kuala Lumpur, Malaysia Wipro Limited Full time

    Kuala Lumpur, Malaysia - Tech Hiring - 3064455 **Job Description**: **SOC Consultant (L1 Level)** - Location: Kuala Lumpur, Malaysia **Required skills**: - 2-5 Years of Experience in SOC - Familiarity and experience in implementation of or two SIEM products (LogRhythm, QRadar, SA, Sentinel, Arcsight etc). - Install / configure / build / fine-tune the SIEM...

  • Network Security

    5 months ago

    Kuala Lumpur, Malaysia Hong Leong Bank Full time

    Network Security (Level 2 SOC Management) **If you are looking to excel and make a difference, take a closer look at us...** **Role Summary**: You will be a technical point of contact to manage, deploy and implement system level security with an architectural and project management view of IT Security as a whole. **Your Key Responsibilities**: - Plays...

  • Cybersecurity Incident Responder Apac

    5 months ago

    Kuala Lumpur, Malaysia Danone Full time

    About the job To succeed in this journey, we're looking for the right talent and personalities eager to bring their energy and ideas to a meaningful project. Take this opportunity to GROW together and experience a culture that empowers you to express your ideas and share what you're passionate about! **1. Incident Detection and Response**: - Monitor and...

  • Security Operations Center

    5 months ago

    Kuala Lumpur, Malaysia Starweb Global Resources Sdn Bhd Full time

    Responsibilities - Work collaboratively with Account Manager for Client relations - Track incident detection and closure - Execute risk hunting activities - Undertake forensic investigations - General intelligence advisories and delegate intelligence aggregation tasks to L2 - Generate new use cases for emerging threats - Conduct incident response...

  • Cyber Security Incident Response Specialist

    2 months ago

    Kuala Lumpur, Malaysia Nestle Operational Services Worldwide SA Full time

    **Position Snapshot** Location: Kuala Lumpur, MY Company: Nestrade (Nestle Regional Service Centre) Full-time Bachelor’s Degree 5+ years of experience **Position Summary** Joining Nestlé means you are joining the largest Food and Beverage Company in the world. At our very core, we are a human environment - passionate people driven by the purpose of...

  • Incident Response Senior Associate

    2 months ago

    Kuala Lumpur, Kuala Lumpur, Malaysia S-RM Intelligence and Risk Consulting Full time

    About the RoleS-RM Intelligence and Risk Consulting is seeking a highly skilled Cyber Security Expert to join our team in Kuala Lumpur. As a Senior Technical Lead, you will play a critical role in our Cyber Security division's success.Key ResponsibilitiesIncident Response: Deploy your expertise in incident response, including technical incident response,...

  • Incident Manager

    5 months ago

    Kuala Lumpur, Malaysia Coda Payments Full time

    **What we do** At Coda, we break down barriers between publishers and their audiences by thinking outside of the app. Coda is trusted by 300+ top digital content publishers - including industry giants Activision Blizzard, Bigo, Electronic Arts, Riot Games, and Zynga - to grow revenue, profit margins, and customer engagement in 60+ markets with ease. For...

  • Associate Security Consultant

    5 months ago

    Kuala Lumpur, Malaysia Arvato Systems Malaysia Sdn. Bhd. Full time

    Serves as a contact person to users for cyber security issues, mainly engages in real-time (threshold) security monitoring, event evaluation, alert triage, and incident response. Identifies/filters false positives for process optimization. Responsible for verification, assessment, and classification of reported Cyber Security incidents. Communicates incident...