Information Technology Security Analyst - Malaysia, Kuala Lumpur - KGiSL

    Default job background
    Full time

    Company Description

    KGiSL is a BFSI centric enterprise software company that offers products and services focused on Banking, Insurance, Capital Markets, & Wealth Management segments. The company is heavily invested in harnessing the power of Machine Learning (ML), Artificial Intelligence (AI), Analytics, Data Science and Cloud to deliver outcomes backed by next Generation Customer Experience. KGiSL has a strong presence in the APAC region, with offices in India, USA, Singapore, Malaysia, Australia and Thailand.

    Role Description

    This is a full-time on-site role for an Information Technology Security Analyst located in Kuala Lumpur. The IT Security Analyst will be responsible for cybersecurity, application security, network security, and information security to ensure that KGiSL meets its security and compliance requirements. Day-to-day tasks will include monitoring network activity, identifying vulnerabilities, implementing security tools and measures, delivering training programs, conducting security assessments, researching new threats, and making recommendations for IT security improvements.

    Exposure to security monitoring technologies, such as SIEM, IPS/IDS, UEBA, DLP, AV, among others

    • Knowledge of various operating system including but not limited to Windows, Linux, Unix

    • Demonstrated ability to work in a team environment

    • Good analytical and problem-solving skills

    • 24x7 monitoring on IT security abnormalities or suspicious activities and closing or escalating those alerts to Level-2 analyst in timely manner

    • Investigate security alert using SIEM technology, report, data visualization, pattern and behavioral analysis

    • Reach out to respective user to validate security alert

    • Provide feedback on use case to Level-2 analyst for further review

    • Suggest tuning on false positive security alert

    • Document and maintain knowledge base of alarms (false positives, false negatives)

    • Maintain the group email address and distribution lists, answer SOC main phone lines, and update all relevant documentation such as shift logs