{"id":1682281,"url":"https://alion.io/job/ericsson-cyber-defense-specialist","title":"Cyber Defense Specialist","company":{"id":56456,"name":"Ericsson","domain":"ericsson.com","url":"https://alion.io/company/ericsson","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Eightfold","truth_index":{"grade":"B","score":83,"open_postings":102,"ghost_share":0,"stale_share":0.686,"repost_share":0,"time_to_fill_p50_days":32,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Shah Alam, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":21000,"max_usd":48000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2225},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Carbon Black","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Cyber Kill Chain","optional":false},{"name":"Diamond Model","optional":false},{"name":"DNS","optional":false},{"name":"IBM QRadar","optional":false},{"name":"ITIL","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Wireshark","optional":false},{"name":"YARA","optional":false},{"name":"YARA","optional":false}],"status":"live","first_seen_at":"2026-08-02T07:47:49Z","employer_posted_date":"2026-10-02","last_verified_at":"2026-10-22T05:06:43Z","board_verified":true,"closed_at":null,"days_open":81,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":81},"description":"Grow with us\nAs the tech firm that created the mobile world, and with more than 54,000 patents to our name, we’ve made it our business to make a mark. When joining our team at Ericsson you are empowered to learn, lead and perform at your best, shaping the future of technology. This is a place where you're welcomed as your own perfectly unique self, and celebrated for the skills, talent, and perspective you bring to the team. Are you in?\nCome, and be where it begins.\nJob Summary\n We are seeking an experienced Cyber Defence Specialist responsible for monitoring, detecting, investigating, and responding to cybersecurity threats while ensuring compliance with regulatory and organizational security requirements. The ideal candidate possesses strong hands-on experience in Security Operations Center (SOC) functions, incident response, threat intelligence, vulnerability management, and security governance.\nThe role also requires supporting cybersecurity compliance initiatives, forensic investigations, and continuously improving the organization's cyber defence capabilities.\nKey Responsibilities\nSecurity Operations Center (SOC)\n\nMonitor security events using SIEM, EDR, NDR, SOAR, IDS/IPS, and other security monitoring platforms.\nPerform Level 2/Level 3 incident investigation and response.\nConduct malware analysis and threat hunting activities.\nInvestigate phishing, ransomware, insider threats, account compromise, and advanced persistent threats (APT).\nAnalyze logs from servers, firewalls, cloud platforms, endpoints, databases, and network devices.\nDevelop and optimize SIEM correlation rules and detection use cases.\nLead incident triage, containment, eradication, recovery, and post-incident reviews.\nCoordinate with infrastructure, application, cloud, and network teams during security incidents.\nMaintain incident documentation, root cause analysis (RCA), and lessons learned.\nThreat Intelligence & Threat Hunting\nMonitor emerging cyber threats and vulnerabilities.\nCorrelate Indicators of Compromise (IOCs) and Indicators of Attack (IOAs).\nIntegrate threat intelligence feeds into SOC operations.\nPerform proactive threat hunting using MITRE ATT&CK techniques.\nRecommend improvements to security controls based on threat trends.\nForensics\nPerform forensic acquisition of endpoints, servers, virtual machines, and cloud workloads.\nSupport cyber investigations with law enforcement or external agencies where required.\nSupport customer in investigation related to respective OS.\nKnowledge of telco network applications and interfaces.\n.\nCompliance & Governance\nISO/IEC 27001\nNIST Cybersecurity Framework (CSF)\nCIS Controls\nLocal regulatory requirements (e.g., MCMC NCII, PDPA, sector-specific regulations)\nAssist with internal and external security audits.\nReview and maintain security policies, procedures, and standards.\nTrack compliance findings and remediation activities.\nVulnerability & Security Management\nCoordinate vulnerability assessments and penetration testing.\nPrioritize remediation based on business risk.\nTrack vulnerabilities through closure.\nValidate security hardening across Windows, Linux, cloud, databases, and network devices.\nSupport secure configuration reviews.\nSecurity Engineering & Automation\nEnhance SOC automation using SOAR platforms.\nDevelop security playbooks and response procedures.\nImprove detection engineering using Sigma, YARA, and SIEM rules.\nSupport integration of security tools through APIs and automation scripts.\n.\nReporting & Communication\nPrepare executive and technical incident reports.\nPresent security findings to management and stakeholders.\nDevelop SOC dashboards and KPIs.\nConduct awareness sessions for technical teams.\nSupport cyber crisis management and tabletop exercises.\nRequired Technical Skills\n Security Operations\nSIEM (Splunk, Microsoft Sentinel, QRadar, ArcSight, Elastic)\nEDR/XDR (Microsoft Defender, CrowdStrike, SentinelOne, Carbon Black)\nSOAR platforms\n.\nNetworking\nTCP/IP\nDNS\nHTTP/HTTPS\nSMTP\nVPN\nRouting and Switching\nNetwork packet analysis (Wireshark)\nThreat Frameworks: MITRE ATT&CK; Cyber Kill Chain; Diamond Model\nQualifications\nBachelor's degree in Computer Science, Cyber Security, Information Technology, or related discipline.\n5-10 years of cybersecurity experience and telco network background is preferred.\nMinimum 3 years in a Security Operations Center (SOC).\nExperience handling major cyber incidents.\nExperience performing forensic investigations.\nStrong understanding of compliance and audit processes.\nITIL certification, CEH, Security +, CompTIA Security+, CCNA Security, or similar will be an advantage\nBasic knowledge of telecommunications networks will be an added advantage\nWhy join Ericsson? At Ericsson, you´ll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what´s possible. To build solutions never seen before to some of the world’s toughest problems. You´ll be challenged, but you won’t be alone. You´ll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next.\nWhat happens once you apply?Click Here to find all you need to know about what our typical hiring process looks like.Encouraging a diverse and inclusive organization is core to our values at Ericsson, that's why we champion it in everything we do. We truly believe that by collaborating with people with different experiences we drive innovation, which is essential for our future growth. We encourage people from all backgrounds to apply and realize their full potential as part of our Ericsson team. Ericsson is proud to be an Equal Opportunity Employer. learn more.\nPrimary country and city: Malaysia (MY) || Shah Alam\nReq ID: 788892","description_format":"text","description_chars":5723,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","C4ISR","Telecom Infrastructure","Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-02T09:47:27Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.4,"p_room":0.28,"age_days":80,"expected_fill_days":32,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/ericsson-cyber-defense-specialist","json_url":"https://alion.io/job/ericsson-cyber-defense-specialist.json","meta":{"generated_at":"2026-10-22T08:08:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4211,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":56456},"rest":"https://alion.io/mcp/rest/get_company?id=56456"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fericsson-cyber-defense-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fericsson-cyber-defense-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fericsson-cyber-defense-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ericsson-cyber-defense-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fericsson-cyber-defense-specialist"}]}