Security Analyst

2 weeks ago

Kuala Lumpur, Kuala Lumpur, Malaysia CARSOME Full time 60,000 - 120,000 per year

About You

The Security Analyst II is responsible for day-to-day cybersecurity operations, including monitoring alerts, investigating incidents, validating endpoint hygiene, and ensuring timely execution of remediation plans. The role serves as a tactical executor under the direction of the Senior Manager, Cybersecurity and in coordination with the SOC and Infrastructure teams. Ideal candidates are those with solid hands-on experience in endpoint security, log triage, DLP monitoring, and vulnerability management.

Your-Day-To-Day

Security Event Monitoring & Response
:

  • Monitor alerts from EDR (Crowdstrike), DLP (Google Workspace), and other SIEM sources; investigate and escalate validated events.
  • Coordinate with Managed SOC for Level 1/2 triage, assist in root cause validation, and track incidents to closure.
  • Participate in incident response processes, including evidence collection, analysis, and response documentation.

Endpoint & Device Visibility:

  • Continuously monitor CS and MEDC installation status, highlighting assets lacking endpoint visibility.
  • Conduct hygiene validation exercises against endpoint baseline (e.g. Crowdstrike health, GWS login telemetry, etc).
  • Work with IT Service Operations to address untagged, unmonitored, or misconfigured devices.

Vulnerability & Patch Coordination:

  • Review scan results (e.g., ) for high/critical findings and follow up with Infra and IT Ops for remediation status.
  • Support prioritization of vulnerabilities based on asset classification and exposure.
  • Participate in monthly patch and remediation governance tracking.

DLP Operations & Enforcement:

  • Investigate DLP rule violations, verify false positives, and escalate breaches aligned to Data Classification policy.
  • Maintain documentation on DLP cases and support tuning of policies with the Cloud Security Engineering team.
  • Support Falcon Data Protection rollout testing (PoC) and feedback loop.

Reporting, Compliance & Audit Support:

  • Maintain operational metrics related to endpoint coverage, DLP alerts, and vulnerability remediation.
  • Support audit activities requiring endpoint agent matching, asset traceability, and license reconciliation.
  • Assist with monthly/quarterly reporting to Cybersecurity GRC and CTO functions for ongoing governance reviews.

Qualifications & Experience:

  • Education
    : Bachelor's degree in Cybersecurity, Information Technology, or a related discipline.
  • Experience
    : 2–4 years' experience in a SOC, IT security operations, or security analyst capacity. Proven experience handling EDR, SIEM, DLP, or VA tools in a mid-size or enterprise organization.
  • Familiarity with endpoint protection platforms (e.g., Crowdstrike, Carbon Black, SentinelOne).
  • Exposure to vulnerability management tools (e.g., Tenable, Qualys) and patching workflows.
  • Working knowledge of DLP controls in Google Workspace or Microsoft 365 environments.
  • Ability to interpret alerts, analyze logs, and investigate user or system behavior anomalies.
  • CompTIA Security+, Crowdstrike Certified Falcon Administrator (CCFA), Google Workspace Security Admin, or equivalent.
  • Effective communication and collaboration skills for working with diverse teams and third-party vendors.
  • Adaptable to changing priorities and able to manage workload independently.

  • Security Analyst

    2 days ago

    Kuala Lumpur, Kuala Lumpur, Malaysia Talent Work Full time 90,000 - 120,000 per year

    Job Summary: Our Client, a well-established Foreign Investment Bank in Malaysia, is seeking a skilled Security Analyst to ensure robust cybersecurity. Responsibilities include monitoring alerts, coordinating assessments, analyzing threats, and advising on security matters. If you have a strong IT Security background, relevant certifications, and excellent...

  • Security Analyst

    2 days ago

    Kuala Lumpur, Kuala Lumpur, Malaysia Ensign Services Full time 60,000 - 90,000 per year

    Ensign is hiring Key Responsibilities:Perform in-depth analysis of security events escalated by L1 analysts to determine scope, impact, and appropriate response actions.Investigate and respond to security incidents, including malware infections, phishing attacks, unauthorized access, and other cybersecurity threats.Conduct root cause analysis and recommend...

  • Experienced Cyber Security Analyst

    2 days ago

    Kuala Lumpur, Kuala Lumpur, Malaysia ONESECURE Asia Full time 121,600 - 182,400 per year

    Role DescriptionThis is a full-time on-site role for an Experienced Cyber Security Analyst based in WP. Kuala Lumpur. The role involves conducting security assessments, evaluating security, analyzing and mitigating malware threats, and enhancing network security. The analyst will be responsible for identifying vulnerabilities, developing security strategies,...

  • Security Analyst

    2 days ago

    Kuala Lumpur, Kuala Lumpur, Malaysia Ensign Services Full time $10,000 - $15,000 per year

    Ensign is hiring Key Responsibilities:Monitor security events and alerts from SIEM tools and other security platforms.Perform initial analysis and triage of security incidents based on standard operating procedures (SOPs).Escalate verified incidents to L2/L3 analysts or Incident Response team when necessary.Document alerts, investigations, and incident...

  • Security Analyst L2

    2 days ago

    Kuala Lumpur, Kuala Lumpur, Malaysia Ensign InfoSecurity Full time 60,000 - 120,000 per year

    As a Level 2 Security Analyst in a Managed Security Service Provider (MSSP)environment, you will serve as an advanced escalation point for Tier 1 analysts, handling complex alerts and security incidents across multiple client environments. Your primary responsibility is to investigate threats in-depth, guide incident response eforts, enhance detection...

  • Senior Security Analyst

    2 days ago

    Kuala Lumpur, Kuala Lumpur, Malaysia Ensign Services Full time

    Ensign is hiring The Security Analyst (Level 3) serves as the senior escalation point within the Security Operations Centre (SOC). This role is responsible for advanced incident detection, analysis, containment, and response activities. The L3 Analyst provides technical guidance to junior analysts (L1 & L2), leads threat-hunting initiatives, and contributes...

  • Junior IT Security Analyst

    2 weeks ago

    Kuala Lumpur, Kuala Lumpur, Malaysia KAF Group Full time 60,000 - 120,000 per year

    Job Title: Junior IT Security Analyst, KAF Digital Bank BhdJob Summary:The IT Security Engineer specializing in cloud security plays a pivotal role in safeguarding our digital infrastructure. This role involves designing and implementing robust security measures for our cloud environments, ensuring compliance with industry standards, and leading incident...

  • Senior Security Analyst

    2 days ago

    Kuala Lumpur, Kuala Lumpur, Malaysia Ensign Infosecurity Full time 120,000 - 200,000 per year

    Ensign is hiring Key Responsibilities:Lead high-severity incident response and containment activities, coordinating with stakeholders across IT and business units.Conduct in-depth forensic analysis on endpoints, networks, and logs to determine the root cause and impact of security incidents.Develop advanced detection use cases and correlation rules based on...

  • Security Engineer

    2 days ago

    Kuala Lumpur, Kuala Lumpur, Malaysia Avensys Consulting Full time 80,000 - 120,000 per year

    Avensys is a reputed global IT professional services company, and our service spectrum includes enterprise solution consulting, business intelligence, business process automation and managed services. And we service a client base across banking and financial services, insurance, information technology, healthcare, retail, and supply chain.We are currently...

  • Senior Security Analyst

    2 weeks ago

    Kuala Lumpur, Kuala Lumpur, Malaysia Ensign InfoSecurity Full time 60,000 - 120,000 per year

    Ensign is hiring Key Responsibilities:Lead high-severity incident response and containment activities, coordinating with stakeholders across IT and business units.Conduct in-depth forensic analysis on endpoints, networks, and logs to determine the root cause and impact of security incidents.Develop advanced detection use cases and correlation rules based on...