search Browse Jobs
Senior Security AnalystLogicalis · WP. Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia
Logicalis logo

Logicalis

company page ↗

Senior Security Analyst

🗓️ Posted 2026-09-28 WP. Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia Full-time Hybrid ICT
💰 Salary Not shared 📊 Market RM6,000–RM10,000/mo

About the Company

Why choose Logicalis As Architects of Change, Logicalis' focus is to design, support and execute clients' digital transformation by uniting their vision with their technology expertise and industry insights. The company, through its deep understanding of key IT industry drivers such as security, cloud, data management and IoT, can address customer priorities such as revenue growth and business, operational efficiency, innovation, risk and compliance, data governance and sustainability. We strengthen our purpose: to design, support, and execute our customers' digital transformation by converging their vision with our technological expertise and knowledge of the industry. The brand refresh underpins both the evolution of Logicalis' positioning as well as our strategic vision for growth. Design, develop, and deploy high-fidelity detection rules in SIEM (Splunk, Microsoft Sentinel, Devo, QRadar, EDR, etc.). Create custom use cases to detect MITRE TTPs aligned with real-world threats and red team activities. Conduct detection gap analysis, tune alerting mechanisms, and eliminate false positives at the MSS customer environment Perform regular fine-tuning and optimization of detection rules, correlation logic, and alert thresholds across SIEM, EDR, and other security platforms to enhance detection accuracy and reduce false positives. Continuously assess detection efficacy based on incident feedback and threat landscape evolution, implementing improvements accordingly. Collaborate with red/purple teams to validate detection logic and build threat-informed defenses. Regularly review, update, and enhance detection logic to ensure alignment with the latest threat intelligence, adversary TTPs, and evolving attack techniques. Maintain relevancy and effectiveness of security detections by incorporating insights from threat hunts, incident response cases, red team exercises, and industry best practices. Proactively hunt for advanced threats across on-prem and cloud envi

Requirements

  • ● Candidate should have at least 8-10 years of working experience in SOC and MSS environments,
  • ● Bachelor's degree in computer engineering, Computer Science, Cyber Security, Information Security, or other equivalents.
  • ● Excellent hands-on experience in implementations, incident analysis of Splunk, IBM QRadar, Azure Sentinel SIEM (Security Information and Event Management) & Devo technologies.
  • ● Hands on experience on any Endpoint Protection (EPP) or Endpoint Detection Response (EDR) technologies. Preferred if CrowdStrike, Microsoft Defender.
  • ● Hands on experience on SOAR (Security Orchestration, Automation, and Response) technologies.
  • ● Experience in malware analysis for Windows and Linux/Mac.
  • ● Exposure to firewall technologies such as Cisco, Palo Alto, Checkpoint, Fortinet.
  • ● Good understanding of WIN, LINUX environments and well versed with basic LINUX commands and troubleshooting, with proven Unix (Solaris, Linux, BSD (Bumi Serpong Damai)) experience.
  • ● Knowledge of any shell scripting language and applying it to automate mundane operations tasks
  • ● Knowledge of current cyber threats, attack vectors, vulnerabilities, and threat intelligence feeds.
  • ● Ability to work effectively in a team environment, collaborate cross-functionally, and mentor junior analysts
  • ● Candidate should have at least one SANS certification. Preferred if that is GCIH
  • ● Good understanding of basic network concepts and advantages of exposure to cloud technologies.
  • ● Lateral thinking combined with excellent troubleshooting skills, preferably with experience following ITIL (Information Technology Infrastructure Library) standards
  • ● Lead team of security analysts, develop SOC standard operating procedures and develop Threat Intel feeds such as MISP.