L2 - Security Analyst
Ensign InfoSecuritySelangor, Malaysia
Posted April 20, 2026
Full Time
About the Company
Ensign InfoSecurity is the largest pure-play end-to-end cybersecurity service provider in Asia. Headquartered in Singapore, Ensign offers bespoke solutions and services to address their clients’ cybersecurity needs. Their core competencies are in the provision of cybersecurity advisory and assurance services, architecture design and systems integration services, and managed security services for advanced threat detection, threat hunting, and incident response. Underpinning these competencies is in-house research and development in cybersecurity. Ensign has two decades of proven track record as a trusted and relevant service provider, serving clients from the public and private sectors in the Asia Pacific region.
Job Description
Ensign is hiring a L2 - Security Analyst to analyze and respond to escalated alerts, conduct investigations, and provide technical guidance and support. The ideal candidate has 2-4 years of experience in a Security Operations Center or similar cybersecurity environment, a Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field, and strong technical skills in SIEM, EDR, NDR, and SOAR platforms.
Requirements
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field—or equivalent work experience.
- 2–4 years of experience in a Security Operations Center or similar cybersecurity environment.
- Experience working in an MSSP or multi-tenant environment is highly desirable.
- Strong experience with SIEM platforms (e.g., Splunk, Sentinel, QRadar, Google SecOps).
- Hands-on experience with EDR tools (e.g., CrowdStrike, SentinelOne, Microsoft Defender, FireEye).
- Familiarity with NDR and SOAR platforms is a plus (e.g., Darktrace, Corelight, Cortex XSOAR).
- Strong understanding of networking protocols, log analysis, and system administration (Windows/Linux).
- Knowledge of malware behaviors, phishing techniques, and MITRE ATT&CK framework.
- Experience with scripting and automation tools (e.g., Python, PowerShell) is a plus.
- Familiarity with case management tools (e.g., Jira, ServiceNow, TheHive).
- Certifications (preferred): CompTIA Security+, CySA+, or equivalent. GIAC certifications (e.g., GCIH, GCIA, GCFA). CEH, or vendor-specific certifications (e.g., Microsoft SC-200, CrowdStrike CCFR).
