{"id":3710583,"url":"https://alion.io/job/time-dotcom-security-operations-center-analyst","title":"Security Operations Center Analyst","company":{"id":49623,"name":"TIME dotCom","domain":"time.com.my","url":"https://alion.io/company/time-dotcom","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Shah Alam, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Acunetix","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"Burp Suite","optional":false},{"name":"GCP","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"MS SQL","optional":false},{"name":"MySQL","optional":false},{"name":"Okta","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PostgreSQL","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Windows","optional":false},{"name":"CIS Benchmarks","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"MITRE D3FEND","optional":true},{"name":"STRIDE","optional":true},{"name":"Threat Modeling","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-11-03T22:58:15Z","employer_posted_date":null,"last_verified_at":"2026-11-03T22:58:15Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"The position reports to the Head of Group SOC.\n\nJob Overview: \nThe SOC Analyst (Threat & Exposure) is responsible for proactively identifying, assessing, and reducing security exposures across the organization's technology landscape. As part of the Group Security Operations Center (GSOC), the role focuses on vulnerability management, attack surface analysis, security assessments, and security validation activities across multiple technology domains. The role helps ensure security weaknesses, misconfigurations, and control gaps are identified and addressed before they can be exploited by threat actors.\n\nWorking closely with Cybersecurity and IT teams, this role supports the continuous improvement of the organization's security posture through risk-based assessments, exposure management, and remediation validation. While expertise in every technology domain is not expected, the successful candidate should demonstrate strong analytical thinking, curiosity, adaptability, and a commitment to continuously expanding their cybersecurity knowledge and capabilities.\n\nRoles & Responsibilities\nExposure Management\nIdentify and assess security exposures across infrastructure, network, endpoint, identity, cloud, and application environments.\nPerform attack surface reviews to identify attack paths, security weaknesses, misconfigurations, and control gaps.\nAnalyze attack paths and potential opportunities for privilege escalation, lateral movement, unauthorized access, credential compromise, and data exposure.\nAssess exploitability and potential business impact of excessive privileges, insecure configurations, weak controls, technology vulnerabilities, and exposed services.\nRecommend, track, and validate remediation activities to reduce organizational cyber exposure.\nSupport adversary simulation and purple team exercises to assess security control effectiveness.\n\nSecurity Validation\nPerform technical validation of security controls to verify they are operating effectively and providing the intended protection.\nAssess the effectiveness of preventive, detective, and responsive controls across identity, endpoint, network, cloud, and application environments.\nValidate remediation effectiveness through targeted testing and verification activities.\nConduct technical reviews and validation activities to identify deviations from approved security baselines, hardening standards, and security requirements.\nSupport adversary simulation, purple team exercises, and security validation initiatives.\nWork closely with other team members to ensure critical exposures are adequately monitored, detectable, and responsive.\nIdentify control gaps and recommend improvements to strengthen cyber resilience.\n\nVulnerability Management\nManage the vulnerability management lifecycle from discovery through remediation validation.\nCoordinate vulnerability scanning activities across servers, endpoints, network devices, cloud environments, and applications.\nAssess vulnerability exploitability, business impact, and remediation priority.\nMonitor remediation progress and validate closure of identified vulnerabilities.\nProduce vulnerability metrics, trends, and management reports.\n\nPenetration Test & Security Assessment Coordination\nCoordinate internal and external penetration testing and security assessment activities where required.\nReview findings and support risk prioritization.\nTrack remediation actions and verify closure of identified findings.\nMaintain assessment records, trends, and exposure metrics.\n\nReporting & Stakeholder Engagement\nPrepare exposure management dashboards, metrics, and reports.\nPresent findings and recommendations to technology teams and management.\nSupport risk discussions and remediation prioritization activities.\nMaintain visibility of organizational attack surface, exposure trends, and remediation effectiveness.\n\nYour Traits\nPossess an attacker-minded approach when assessing systems, configurations, and security controls.\nStrong analytical and problem-solving skills with the ability to identify meaningful risks from technical findings.\nCurious and eager to learn across multiple technology domains and cybersecurity disciplines.\nAble to balance technical risks with business priorities and practical remediation approaches.\nDetail-oriented and methodical in assessing security weaknesses and validating control effectiveness.\nStrong communication and stakeholder engagement skills, with the ability to influence remediation outcomes.\nSelf-motivated with a continuous improvement mindset and passion for cybersecurity.\n\nYour Merits\nExperience\nMinimum 5 years of cybersecurity experience in security operations, vulnerability management, security assessments, infrastructure security, cloud security, application security, or related disciplines.\nExperience identifying security weaknesses and working with technology teams to implement remediation.\nExperience performing security assessments, vulnerability analysis, or security validation activities.\n\nTechnical Knowledge\nExposure Management & Security Validation: Attack surface management, exposure management, attack path analysis, security control validation, remediation validation, adversarial thinking, and risk-based prioritization of security weaknesses.\nVulnerability Management & Security Assessment: Vulnerability assessment and prioritization, vulnerability lifecycle management, security assessments, security configuration reviews, hardening validation, and exposure analysis using vulnerability management and assessment platforms (e.g., Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management).\nIdentity, Infrastructure & Cloud Security: Identity and access management security (e.g., Active Directory, Microsoft Entra ID, Okta), authentication, authorization, privileged access security, cloud security posture assessment (e.g., Microsoft Azure, AWS, Google Cloud), network security fundamentals, Linux and Windows security, and infrastructure hardening principles.\nApplication & API Security: Web application and API security concepts, OWASP Top 10, authentication and authorization controls, API security, application attack surfaces, and application security testing tools (e.g., Burp Suite, OWASP ZAP, Acunetix).\nSecurity Analysis & Investigation: Log analysis, attack path reconstruction, threat-informed security assessments, security findings validation, attack simulation techniques, and security control effectiveness reviews.\nData Analysis, Scripting & Automation: Basic scripting and automation (e.g., PowerShell, Python, Bash), security data analysis, vulnerability data interpretation, database fundamentals (e.g., Microsoft SQL Server, MySQL, PostgreSQL), and reporting automation.\n\nPreferred Qualifications\nRelevant cybersecurity certifications and practical experience in security operations, vulnerability management, exposure management, cloud security, identity security, security assessment, and penetration testing would be advantageous.\nCertifications: SC-200, SC-300, AZ-500, Security+, CySA+, CEH, CISSP, and other industry-recognized cybersecurity certifications.\nFrameworks and methodologies: MITRE ATT&CK, MITRE D3FEND, OWASP Top 10, Threat Modeling, STRIDE, Attack Trees, Zero Trust Architecture, and CIS Benchmarks.\n\nSuccess in this role will be measured by:\nReduction in critical and high-risk vulnerabilities.\nReduction in exploitable attack paths and excessive privileges.\nImprovement in vulnerability remediation SLA compliance and reduction of overdue findings.\nNumber of critical exposures identified and remediated before exploitation.\nNumber of security control weaknesses identified through security validation activities.\nReduction in repeat findings from vulnerability assessments, penetration tests, and security reviews.\nIncreased maturity of Threat & Exposure Management capabilities, processes, and reporting.\n\nOur Commitment to You\nAt Time, we believe great work deserves great support. Here's what you can look forward to when you join us:\nComprehensive medical coverage for you and your immediate family, including outpatient care, hospitalisation, dental and optical benefits.\nWellness support with an annual spending account for health-related needs, alternative treatments, or even paid-up premiums for personal insurance.\nEmployee assistance during life's big moments, from celebrations to times of bereavement.\nLearning & growth opportunities through dedicated time for learning, access to LinkedIn Learning and rewards for upskilling.\nCash rewards for recognised certifications and full reimbursement for up to two approved professional memberships each year.\n\n*Only shortlisted candidates will be notified.","description_format":"text","description_chars":8691,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Growth opportunities"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Security Operations","Internet Service Providers","Information Security"],"lifecycle":[{"event":"open","at":"2026-11-03T22:58:15Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":30,"reasons":["seen:0","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/time-dotcom-security-operations-center-analyst","json_url":"https://alion.io/job/time-dotcom-security-operations-center-analyst.json","meta":{"generated_at":"2026-11-04T08:48:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"assistant_verified","counted_by":"address","units_charged":1,"used_today":2099,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49623},"rest":"https://alion.io/mcp/rest/get_company?id=49623"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftime-dotcom-security-operations-center-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftime-dotcom-security-operations-center-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftime-dotcom-security-operations-center-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/time-dotcom-security-operations-center-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftime-dotcom-security-operations-center-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3710583}},{"tool":"search_jobs","arguments":{"company":"time.com.my","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3710583},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}