SOC Analyst L2 – Cybersecurity Operations

• Monitor security alerts across multiple security platforms and identify potential threats
• Triage and investigate alerts, analyse security logs, and distinguish true positives from false positives
• Assess incident severity, gather indicators of compromise (IOCs), and document investigation findings
• Manage and track security incidents in ServiceNow, ensuring compliance with SLAs
• Communicate incident updates and recommendations to customers professionally
• Escalate complex incidents to L3 analysts and the SOC Manager, and support containment and remediation activities
• Maintain accurate incident records, shift handovers, and operational documentation
• Support customers across ASEAN as part of the Managed Security Operations Center (SOC)

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field
• Understanding of cybersecurity fundamentals, SIEM monitoring, incident management, identity security, endpoint protection, and email security
• Familiarity with Microsoft security technologies, preferably Microsoft Defender
• Basic knowledge of security log analysis, KQL, or PowerShell is an advantage
• 1–2 years of experience in SOC operations, cybersecurity, or IT operations
• Experience in a Managed Security Services Provider (MSSP) environment is an advantage
• Relevant certifications such as Microsoft SC-200, SC-900, CompTIA Security+, or ISC2 Certified in Cybersecurity are preferred
• Strong analytical and problem-solving skills
• Good written and verbal communication skills
• Attention to detail and accurate documentation
• Ability to work independently and remain effective under pressure
• Willingness to work rotating shifts, if required

• No benefits, perks, or compensation extras are specified in the posting