{"id":135145,"url":"https://alion.io/job/ensign-infosecurity-security-analyst-2","title":"Security Analyst","company":{"id":50230,"name":"Ensign InfoSecurity","domain":"ensigninfosecurity.com","url":"https://alion.io/company/ensign-infosecurity","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":73,"open_postings":51,"ghost_share":0.529,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":9,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kuala Lumpur, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14000,"max_usd":42000,"period":"year","method":null,"sample_n":4941},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IBM QRadar","optional":false},{"name":"LogRhythm","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-04-30T00:00:00Z","employer_posted_date":"2026-04-30","last_verified_at":"2026-10-17T08:51:33Z","board_verified":true,"closed_at":null,"days_open":170,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":170},"description":"Ensign is hiring !\nKey Responsibilities:\nPerform in-depth analysis of security events escalated by L1 analysts to determine scope, impact, and appropriate response actions.\n\nInvestigate and respond to security incidents, including malware infections, phishing attacks, unauthorized access, and other cybersecurity threats.\n\nConduct root cause analysis and recommend remediation and preventive actions.\n\nUtilize threat intelligence feeds and tools to enhance the detection and investigation process.\n\nCollaborate with other IT/security teams to contain and resolve incidents.\n\nMaintain and improve incident response runbooks and playbooks.\n\nAssist in tuning and optimizing SIEM rules, correlation logic, and alerts to reduce false positives.\n\nMentor and support L1 analysts to ensure consistent incident handling practices.\n\nPrepare incident reports and executive summaries for management or customers.\n\nParticipate in red/blue team exercises or threat-hunting activities as needed.\n\nRequirements:\nEducation & Certification:\nDegree in Cybersecurity, Computer Science, Information Technology, or a related field.\n\nRelevant certifications are highly preferred: CompTIA CySA+, EC-Council ECIH, GCIA, GCFA, GCIH, etc.\n\nTechnical Skills:\nStrong understanding of network protocols, log analysis, and cybersecurity frameworks.\n\nHands-on experience with SIEM platforms (e.g., Splunk, QRadar, LogRhythm).\n\nFamiliarity with EDR/XDR tools, IDS/IPS, firewalls, and forensic tools.\n\nAbility to write and optimize detection rules and scripts.\n\nKnowledge of MITRE ATT&CK and threat modeling methodologies.","description_format":"text","description_chars":1589,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Managed Security"],"lifecycle":[{"event":"open","at":"2026-04-30T00:00:00Z"}],"visa":[],"liveness":{"score":2,"band":"cold","label":"Long shot","p_open":1,"p_active":0.066,"p_room":0.28,"age_days":170,"expected_fill_days":9,"reasons":["conf:0","stale_co","velocity","ghost","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/ensign-infosecurity-security-analyst-2","json_url":"https://alion.io/job/ensign-infosecurity-security-analyst-2.json","meta":{"generated_at":"2026-10-17T12:16:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16268,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50230},"rest":"https://alion.io/mcp/rest/get_company?id=50230"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fensign-infosecurity-security-analyst-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fensign-infosecurity-security-analyst-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fensign-infosecurity-security-analyst-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ensign-infosecurity-security-analyst-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fensign-infosecurity-security-analyst-2"}]}