Job Description

L2 SOC Analyst - Malaysia:

This is a remote position working from home. You may be required to attend occasional meetings at our KL office.

We're CyberOwl, a dynamic cyber security company that operates globally with colleagues based in the UK, Greece, Singapore, Malaysia, Poland and the Philippines. CyberOwl helps maritime and CNI asset operators gain visibility, cybersecurity, and compliance of systems on their distributed, remote assets. We work with ship owners and managers where our technologies provide near-real-time visibility of the onboard IT and OT assets and their communication patterns, raises early warning of cyber-attacks, suspicious behaviours and monitors for non-compliance. We complement this with a managed service (SOC) and specific cybersecurity advisory services to further support the asset operator. We were recently acquired by DNV, further enhancing our ability to service our maritime customers.

Our team is 60+ Owls strong and always growing. We’re experiencing another significant growth phase and a move towards scaling our services and operations. We’re recognised as market innovators - we have a bias for action, and our team prides itself on their ability to plan, execute, and iterate at a rapid pace. We value the ability to challenge each other, hold each other to account, develop each other personally and professionally, and celebrate each other’s successes.

Our culture is at the heart of everything that we do and we live by our values; BE OWLS. We celebrate diversity with 13 nationalities, 17 languages, many more dialects, and lots of owls. We are spread across 2 continents and 6 countries.

The Role:

We’re looking for a Level 2 (L2) SOC analyst who has previous experience of working in a customer facing SOC team, and wishes to join a fast paced startup environment where they can showcase their expertise whilst helping the team provide outstanding customer service. Ideally you will have honed your skills in an industrial controls / OT, IOT environment.

What You Will Do:

Monitor security logs and network traffic to identify and report on suspicious or malicious activity on customer networks and assets.
Conduct in-depth analysis of security alerts using proprietary and third-party tools, correlating data to assess impact and determine root cause.
Collaborate with the Customer Success Manager to present security metrics, incident summaries and insights to customers in an insightful way and as part of regular online meetings.
Craft slides and visual presentation materials for use in customer meetings that explain the evolving threat landscape, past incidents and key metrics in simple to understand language for non technical users.
Produce detailed security reports or advisories tailored to various stakeholder audiences as part of CyberOwls value added service.
Keep up-to-date on emerging threats and develop new detection capabilities, sharing your knowledge with the SOC team and customers.
Partner with developers to refine and expand threat detection capabilities through enhanced rule sets, signatures, and behavioral analytics.
Contribute to R&D initiatives focused on advancing SOC automation, including playbooks, orchestration, and machine learning integration.
Collaborate with UI/UX teams to optimise product features and workflows. Capable of leading product demonstrations for both technical and non-technical stakeholders.
Create and maintain a log of best practice.
Assist in the development and delivery of coaching and mentoring for less experienced SOC analysts.
Provide the SOC team leader with support and deputise for them in their absence.

Essential Skills:

A thorough understanding and theoretical knowledge of Cybersecurity and the evolving threat landscape.

Demonstrable experience of having worked in an external customer facing SOC serving the needs of international customers.

The ability to take complex cybersecurity information and convey it in everyday language to customers, users and stakeholders who don’t come from a Cyber / IT background.

A self starter who can work autonomously with little supervision, but also collaboratively as part of a wider team when required.

Has experience of using and tuning SIEM tools.

Can prioritise and work under pressure without losing sight of the end goal.

Has the ability to think creatively to solve problems and propose solutions.

Is able to critically think, evaluate and prioritise.

Can act as the escalation point for less experienced SOC analysts.

Desirable:

Ideally previous experience of using Kabana and Elastic
Practical experience or knowledge of OT security
Previous team leadership experience
Has coached or mentored less experienced team members

Equality Diversity & Inclusion:

CyberOwl is an equal opportunities employer and welcomes applications from all suitably qualified persons, regardless of their race, sex, disability, religion/belief, sexual orientation, gender, marriage/civil partnerships, pregnancy, maternity, or age.

Applicants may request reasonable adjustments to facilitate their application and the selection process.

Data Protection:

When you apply for a job, the personal data contained in your application will be collected by CyberOwl Limited (“Controller”), which is registered at 5th Floor Vivo Building, 30 Stamford Street, London, England, SE1 9LQ and can be contacted by emailing [email protected]. Your personal data will be processed for the purposes of managing CyberOwl’s recruitment related activities, which include setting up and conducting interviews and tests for applicants, evaluating and assessing the results thereto, and as is otherwise needed in the recruitment and hiring processes. Such processing is legally permissible under Art. 6(1)(f) of Regulation (EU) 2016/679 (General Data Protection Regulation) as necessary for the purposes of the legitimate interests pursued by the Controller, which are the solicitation, evaluation, and selection of applicants for employment.

Your personal data will be retained by CyberOwl Limited for as long as CyberOwl determines it is necessary to evaluate your application for employment. Under the GDPR, you have the right to request access to your personal data, to request that your personal data be rectified or erased, and to request that processing of your personal data be restricted. You also have the right to data portability. In addition, you may lodge a complaint with an EU supervisory authority.

We regret that we are unable to reply to all job applications.

Fraud Warning:

Please be aware that CyberOwl will never request payment of any kind from applicants to secure employment. Any request for payments or financial information as part of the recruitment process should be considered fraudulent. This position is not being recruited through recruitment agencies.