Operations Support Engineer

The Security Operations Engineer (L2) is responsible for advanced monitoring, analysis and response to security incidents, alongside conducting technical security assessments such as Vulnerability Assessment and Penetration Testing (VAPT), Security Posture Review and Threat Hunting. The position required to perform on-site troubleshooting and deployment for cybersecurity related services when needed with light travelling expected.

Role & Responsibilities

• Monitor and triage alerts generated by SIEM, IDS/IPS, firewalls, and EDR/XDR platforms.
• Perform L2 analysis and correlation of security events to identify threats and potential compromises.
• Escalate confirmed incidents to L3/Incident Response Team with detailed investigation notes.
• Conduct threat hunting and anomaly detection using SIEM and threat intel feeds.
• Support the Incident Response (IR) process: containment, eradication, recovery, and post-incident reporting.
• Provide necessary support and guidance to L1 in triage and incident management until case closed.
• Create, edit, and review monthly reports.
• Perform Vulnerability Assessment & Penetration Testing (VAPT) when assigned.
• Collaborate with customer, technical, IT and DevOps teams to close vulnerabilities
• and improve system hardening.
• Conduct Security Posture & Compliance Assessment (SPA/CA) for clients against industry CSF and standards.
• Assist remediation assessment and verification.
• Report duty and important escalation to Operations manager and Head of Cybersecurity for high severity incident.

Requirements:

• Bachelor's Degree in Cybersecurity, Computer Science, or related field.
• 2–4 years experience in SOC, Incident Response, or Security Engineering.
• Strong knowledge of SIEM platforms (Elastic, Wazuh, Graylogs, Syslogs API)
• Experience with vulnerability scanners (Nessus, OpenVAS, Qualys) and penetration tools (Burp Suite, Metasploit, Nmap, Kali Linux).
• Understanding of frameworks: ISO 27001, NIST CSF, CIS, MITRE ATT&CK, PDPA Malaysia.
• Strong documentation and analytical skills.