{"id":472687,"url":"https://alion.io/job/logicalis-us-senior-security-analyst","title":"Senior Security Analyst","company":{"id":179520,"name":"Logicalis","domain":"logicalis.com","url":"https://alion.io/company/logicalis-us","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":77,"open_postings":21,"ghost_share":0,"stale_share":0.905,"repost_share":0,"time_to_fill_p50_days":53,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kuala Lumpur, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14500,"max_usd":33000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2225},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Diamond Model","optional":false},{"name":"Fine-tuning","optional":false},{"name":"IBM QRadar","optional":false},{"name":"ITIL","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MISP","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Unix","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-08-17T00:00:00Z","employer_posted_date":"2026-08-17","last_verified_at":"2026-10-22T07:31:54Z","board_verified":false,"closed_at":null,"days_open":68,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":68},"description":"About Us\nAt Logicalis Asia Pacific, this is where you belong, grow, and thrive - at one of APAC's leading AI-driven technology integrators.\nAs the Architects of Change™, we combine global expertise with local insight to help organisations accelerate their journey toward becoming AI-ready enterprises. With 7,000+ professionals across 30 territories and more than 10,000 clients worldwide, we deliver lifecycle services across cloud, connectivity, collaboration, cybersecurity, and managed services - providing real-time visibility and intelligence across our clients' digital ecosystems.\nYou'll belong as part of a collaborative regional team embedded within a global organisation. You'll grow through hands-on experience with the world's leading technology partners, supported by investment in certifications, consulting capability, and cross-border opportunity. And you'll thrive in a culture built on inclusion, trust, and continuous improvement.\nLogicalis is proud to be a Great Place to Work® Certified™ organisation across multiple APAC markets - because the commitment we bring to our clients belongs equally to our people.\nJoin us and help shape the future of technology across APAC.\nDetection Engineering\nDesign, develop, and deploy high-fidelity detection rules in SIEM (Splunk, Microsoft Sentinel, Devo, QRadar, EDR, etc.). \nCreate custom use cases to detect MITRE TTPs aligned with real-world threats and red team activities. \nConduct detection gap analysis, tune alerting mechanisms, and eliminate false positives at the MSS customer environment \nPerform regular fine-tuning and optimization of detection rules, correlation logic, and alert thresholds across SIEM, EDR, and other security platforms to enhance detection accuracy and reduce false positives. \nContinuously assess detection efficacy based on incident feedback and threat landscape evolution, implementing improvements accordingly. \nCollaborate with red/purple teams to validate detection logic and build threat-informed defenses. \nRegularly review, update, and enhance detection logic to ensure alignment with the latest threat intelligence, adversary TTPs, and evolving attack techniques. \nMaintain relevancy and effectiveness of security detections by incorporating insights from threat hunts, incident response cases, red team exercises, and industry best practices. \nThreat Hunting and Threat Intel:\nProactively hunt for advanced threats across on-prem and cloud environments using telemetry from SIEM, EDR, NDR, and threat intelligence. \nDevelop hypotheses based on TTPs, threat intelligence feeds, and incident trends. \nUse frameworks like MITRE ATT&CK and Diamond Model to structure hunting campaigns. \nDocument hunt procedures and outcomes to support knowledge sharing and continuous improvement. \nMap threat actor TTPs to frameworks such as MITRE ATT&CK to support proactive defense strategies and inform detection engineering efforts. \nProvide actionable threat intelligence to SOC, detection engineering, and IR teams to inform custom detection rule development, prioritization of hunts, and incident scoping \nContribute to the threat intelligence lifecycle, including direction, collection, processing, analysis, dissemination, and feedback. \nIngest, analyze, and operationalize threat intelligence from internal sources, commercial feeds, and open-source intelligence (OSINT) to enrich detection logic, threat hunting hypotheses, and incident investigations \nCollaborate with internal and commercial threat intelligence teams to contextualize IOCs and TTPs for targeted and industry-specific threats. \nMaintain up-to-date threat intelligence repositories and contribute to the continuous improvement of threat intel processes and playbooks \nIncident Response:\nLead incident response lifecycle (detection, triage, containment, eradication, recovery). \nHandle security incidents tickets escalated by Level II team, and draft security incident report covering the root cause, forensic evidence, and recommended mitigation plans \nConduct/support forensic analysis of endpoints, logs, and network traffic to determine root cause and impact. \nCoordinate with internal stakeholders and external partners during critical incidents. \nDevelop and maintain playbooks, runbooks, and incident reports. \nDigital Forensics and Incident Response (DFIR) experience is a strong added advantage, enabling deeper investigations and root cause analysis. \nCollaboration & Mentorship :\nMentor and support L1/L2 SOC analysts in investigations, tool usage, and processes. \nParticipate in tabletop exercises and red/purple team assessments. \nLead and conduct regular customer meetings to review SOC activities, including security posture, key metrics, and ongoing initiatives. \nPrepare and deliver detailed briefings on priority incidents, RCA, ensuring timely communication of root cause, impact analysis, mitigation steps, and next actions. \nAct as a primary point of contact for Incident escalations and maintain consistent, professional engagement with client stakeholders. \nCoordinate with cross-functional teams including Engineering, Development, Red Team, and Risk/Compliance. \nIdentify gaps in existing SOC process and work with team members or other departments to create, modify standard operating procedures, to automate any mundane daily operational activities, ensuring Ops are run efficiently. \nRequirements:\nCandidate should have at least 8-10 years of working experience in SOC and MSS environments, \nBachelor's degree in computer engineering, Computer Science, Cyber Security, Information Security, or other equivalents. \nExcellent hands-on experience in implementations, incident analysis of Splunk, IBM QRadar, Azure Sentinel SIEM (Security Information and Event Management) & Devo technologies. \nHands on experience on any Endpoint Protection (EPP) or Endpoint Detection Response (EDR) technologies. Preferred if CrowdStrike, Microsoft Defender. \nHands on experience on SOAR (Security Orchestration, Automation, and Response) technologies. \nExperience in malware analysis for Windows and Linux/Mac. \nExposure to firewall technologies such as Cisco, Palo Alto, Checkpoint, Fortinet. \nGood understanding of WIN, LINUX environments and well versed with basic LINUX commands and troubleshooting, with proven Unix (Solaris, Linux, BSD (Bumi Serpong Damai)) experience. \nKnowledge of any shell scripting language and applying it to automate mundane operations tasks \nKnowledge of current cyber threats, attack vectors, vulnerabilities, and threat intelligence feeds. \nAbility to work effectively in a team environment, collaborate cross-functionally, and mentor junior analysts \nCandidate should have at least one SANS certification. Preferred if that is GCIH \nGood understanding of basic network concepts and advantages of exposure to cloud technologies. \nLateral thinking combined with excellent troubleshooting skills, preferably with experience following ITIL (Information Technology Infrastructure Library) standards \nLead team of security analysts, develop SOC standard operating procedures and develop Threat Intel feeds such as MISP. \nInterested applicants please submit your application with your expected salary and notice period to be considered for the role.\nWe regret that only shortlisted candidates will be notified.\nAs part of any recruitment process, we collect and processes personal data relating to job applicants. We are committed to being transparent about how we collect and use that data and to meeting our data protection obligations.\nBy applying to this post and sending us your resume, you agree to the collection, use and/or disclosure of your personal data in the manner as set out in our Data Protection Notice for Job Applicants.\nClick below to view the data protection notice.\nhttps://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf.\nInterested applicants are invited to apply via our careers portal. Only shortlisted candidates will be notified.\nAs part of our recruitment process, we collect and process personal data relating to job applicants. By submitting your application, you consent to the collection, use, and/or disclosure of your personal data in accordance with our Data Protection Notice for Job Applicants.\nAt Logicalis, we are committed to creating a diverse and inclusive workplace where everyone can thrive.","description_format":"text","description_chars":8422,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Managed IT Services (MSP)","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-09-06T13:47:44Z"}],"visa":[],"liveness":{"score":23,"band":"cold","label":"Long shot","p_open":1,"p_active":0.512,"p_room":0.44,"age_days":68,"expected_fill_days":53,"reasons":["conf:46","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/logicalis-us-senior-security-analyst","json_url":"https://alion.io/job/logicalis-us-senior-security-analyst.json","meta":{"generated_at":"2026-10-24T22:02:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32276,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":179520},"rest":"https://alion.io/mcp/rest/get_company?id=179520"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flogicalis-us-senior-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flogicalis-us-senior-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flogicalis-us-senior-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/logicalis-us-senior-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flogicalis-us-senior-security-analyst"}]}