Description
S-RM is a global intelligence and cyber security consultancy. Since 2005, we've helped some of the most demanding clients in the world solve some of their toughest information security challenges.
As a Senior Cybersecurity Consultant (SOC), you will add your cybersecurity expertise in a vital delivery role to our managed detection and response services. You will leverage the infrastructure and tools that power our Security Operations Centre (SOC) to deliver desired security outcomes for our managed services clients, with a particular focus on those in the APAC region.
Responsibilities:
- Contribute to day-to-day SOC team-related activities, ensuring efficient monitoring, detection, and response to security threats across clients' estates.
- Manage the SOC analyst team in our Kuala Lumpur office, including conducting regular one-to-ones, performance reviews, and development planning.
- Continuously monitor and analyse security alerts from EDR, SIEM, and other security tools to detect suspicious activities or potential threats.
- Conduct investigations and respond to security incidents, executing containment, mitigation, and remediation steps as necessary.
- Use expertise to tune detection rules, automate workflows, and improve incident detection accuracy.
- Perform in-depth log analysis from firewalls, endpoint protection platforms, and other solutions to investigate complex incidents.
- Ensure all incidents are thoroughly documented, including timelines, analysis, mitigation steps, and lessons learned.
- Act as second-line escalation and support to the on-shift SOC Analysts in our 24x7 SOC team.
- Support onboarding and service request activity for our regional MDR clients.
- Proactively search for indicators of compromise (IoCs) and advanced threats within the environment.
- Stay up to date on the latest cybersecurity threats, vulnerabilities, and attack techniques, and integrate threat intelligence into detection and response efforts.
- Provide guidance and mentorship to junior SOC analysts, fostering skill development and ensuring adherence to security best practices.
Requirements:
- Qualifications: A Bachelor's or Master's degree in a relevant subject, such as cybersecurity or computer science.
- Experience: 3+ years of experience in a SOC or cybersecurity operations role, with demonstrated team leadership/supervisory experience.
- Technical Expertise: Strong understanding of EDR and Secops toolsets, with experience configuring and leveraging these tools for incident detection and response.
- Leadership: Proven line management experience, ideally within a SOC environment.
- Customer Minded: Comfortable in client-facing situations and able to discuss cybersecurity issues in customer-friendly language.
- Approach: An investigative mindset, with the ability to solve problems with limited information and guidance.
- Reliability: Dependable and able to manage clients' security and provide cyber-resilience.
- Personal Interest: Some demonstrable knowledge of cyber threat actors and their tactics, techniques, and interest in cybersecurity matters.