Senior SOC Analyst

If you are looking to excel and make a difference, take a closer look at us…

Overview:

We are seeking a highly motivated and experienced Senior SOC Analyst to join our growing security team. This pivotal role will be responsible for leading our incident investigation and threat hunting efforts, contributing to the continuous improvement of our security posture, and mentoring the next generation of security professionals. If you are passionate about cybersecurity, possess a keen eye for detail, and thrive in a fast-paced environment, we encourage you to apply.

Responsibilities:

Incident Response & Security Operations

Lead and conduct in-depth investigations into security incidents, identifying root causes, scope, and impact.

Point-of-contact for ad-hoc security incidents escalation from internal/external operational team

Spearhead high severity incident investigations to ensure swift, effective resolution.

Perform forensic analysis on compromised systems and data to gather evidence and intelligence.

Develop and implement remediation strategies to contain and eradicate threats.

Prepare and present comprehensive weekly and monthly security reports to senior management.

Create detailed incident reports and post-mortem analyses, documenting findings and lessons learned.

Threat Hunting & Detection Engineering

Proactively search for advanced persistent threats (APTs), zero-day exploits, and other sophisticated attack techniques within our network and systems.

Develop and utilize threat intelligence to identify new indicators of compromise (IOCs) and attack patterns.

Create, tune, and optimize custom use cases within SIEM and EDR platforms to enhance detection accuracy.

Leverage security tools and network telemetry to uncover stealthy activities and anomalous behaviors.

Continuously refine threat hunting methodologies and integrate new techniques.

Process Improvement & Tool Optimization

Actively harden security infrastructure by tuning IPS signatures, adjusting WAF policies, and reducing false positives in EDR platforms.

Create, maintain, and document playbooks and runbooks specifically tailored for alert investigation and response.

Evaluate existing security processes, procedures, and tools for effectiveness and efficiency.

Identify opportunities for automation and orchestration to streamline security operations.

Contribute to the development of new security policies and standards.

Mentorship & Collaboration

Provide guidance, coaching, and technical mentorship to junior security analysts.

Foster a culture of continuous learning and knowledge sharing within the team.

Actively participate in various security projects, contributing expertise and insights from an operational security perspective.

Conduct security assessments and vulnerability analyses, providing actionable feedback on system designs.

Collaborate with cross-functional teams (IT, Development, etc.) to integrate security best practices into all stages of the system development life cycle.

Stay current with the latest cybersecurity threats, trends, technologies, and regulations.

Skills and Experience We Are Looking For:

Must-Have Requirements

Bachelor's degree in Computer Science, Information Security, or a related field; equivalent practical experience will be considered.

5+ years of experience in a dedicated security role, with a strong focus on incident response, security operations, or threat hunting.

A minimum of 3 years of direct experience operating as a Level 2 SOC Analyst.

Extensive hands-on experience utilizing and analyzing logs from core security tools, including SIEM, IPS, Firewalls, EDR, and Proxies.

In-depth understanding of network protocols, operating systems (Windows, Linux), and common attack vectors.

Strong analytical and problem-solving skills, with the ability to quickly assess complex situations and make sound decisions.

Excellent written and verbal communication skills, with the ability to articulate technical concepts to both technical and non-technical audiences.

Ability to work independently and as part of a team in a fast-paced, dynamic environment.

Preferred Qualifications

Relevant industry certifications (e.g., GCIH, GCFA, GNFA, OSCP, CISSP, CEH).

Experience with vulnerability management and penetration testing concepts.

Knowledge of forensic tools and techniques.

Experience in a regulated industry (e.g., finance, healthcare).

About Hong Leong Bank

We are a leading financial institution in Malaysia backed by a century of entrepreneurial heritage. Providing comprehensive financial services guided by a Digital-at-the-Core ethos has earned us industry recognition and accolades for our innovative approach in making banking simpler and more effortless for our customers. Our digital and physical offerings span across a vast nationwide network in Malaysia, strengthened with an expanding regional presence in Singapore, Hong Kong, Vietnam, Cambodia, and China.

We seek to strike a balance between diversity, inclusion and merit to achieve our mission of infusing diversity in thinking and skillsets into our organisation. Candidates are assessed based on merit and potential, in line with our mission to attract and recruit the best talent available. Expanding on our “Digital at the Core” ethos, we are progressively digitising the employee journey and experience to provide a strong foundation for our people to drive life-long learning, achieve their career aspirations and grow talent from within our organisation.

Realise your full potential at Hong Leong Bank by applying now.