Job Description

If you are looking to excel and make a difference, take a closer look at us…

We are seeking a highly motivated and experienced Senior SOC Analyst to join our growing security team. This pivotal role will be responsible for leading our incident investigation and threat hunting efforts, contributing to the continuous improvement of our security posture, and mentoring the next generation of security professionals. If you are passionate about cybersecurity, possess a keen eye for detail, and thrive in a fast-paced environment, we encourage you to apply.

Responsibilities:

Incident Response & Security Operations

• Lead and conduct in-depth investigations into security incidents, identifying root causes, scope, and impact.

• Point-of-contact for ad-hoc security incidents escalation from internal/external operational team

• Spearhead high severity incident investigations to ensure swift, effective resolution.

• Perform forensic analysis on compromised systems and data to gather evidence and intelligence.

• Develop and implement remediation strategies to contain and eradicate threats.

• Prepare and present comprehensive weekly and monthly security reports to senior management.

• Create detailed incident reports and post-mortem analyses, documenting findings and lessons learned.

Threat Hunting & Detection Engineering

• Proactively search for advanced persistent threats (APTs), zero-day exploits, and other sophisticated attack techniques within our network and systems.

• Develop and utilize threat intelligence to identify new indicators of compromise (IOCs) and attack patterns.

• Create, tune, and optimize custom use cases within SIEM and EDR platforms to enhance detection accuracy.

• Leverage security tools and network telemetry to uncover stealthy activities and anomalous behaviors.

• Continuously refine threat hunting methodologies and integrate new techniques.

Process Improvement & Tool Optimization

• Actively harden security infrastructure by tuning IPS signatures, adjusting WAF policies, and reducing false positives in EDR platforms.

• Create, maintain, and document playbooks and runbooks specifically tailored for alert investigation and response.

• Evaluate existing security processes, procedures, and tools for effectiveness and efficiency.

• Identify opportunities for automation and orchestration to streamline security operations.

• Contribute to the development of new security policies and standards.

Mentorship & Collaboration

• Provide guidance, coaching, and technical mentorship to junior security analysts.

• Foster a culture of continuous learning and knowledge sharing within the team.

• Actively participate in various security projects, contributing expertise and insights from an operational security perspective.

• Conduct security assessments and vulnerability analyses, providing actionable feedback on system designs.

• Collaborate with cross-functional teams (IT, Development, etc.) to integrate security best practices into all stages of the system development life cycle.

• Stay current with the latest cybersecurity threats, trends, technologies, and regulations.

Skills and Experience We Are Looking For:

Must-Have Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field; equivalent practical experience will be considered.

• 5+ years of experience in a dedicated security role, with a strong focus on incident response, security operations, or threat hunting.

• A minimum of 3 years of direct experience operating as a Level 2 SOC Analyst.

• Extensive hands-on experience utilizing and analyzing logs from core security tools, including SIEM, IPS, Firewalls, EDR, and Proxies.

• In-depth understanding of network protocols, operating systems (Windows, Linux), and common attack vectors.

• Strong analytical and problem-solving skills, with the ability to quickly assess complex situations and make sound decisions.

• Excellent written and verbal communication skills, with the ability to articulate technical concepts to both technical and non-technical audiences.

• Ability to work independently and as part of a team in a fast-paced, dynamic environment.

Preferred Qualifications

• Relevant industry certifications (e.g., GCIH, GCFA, GNFA, OSCP, CISSP, CEH).

• Experience with vulnerability management and penetration testing concepts.

• Knowledge of forensic tools and techniques.

• Experience in a regulated industry (e.g., finance, healthcare).

Realise your full potential at Hong Leong Bank by applying now.