Security Analyst L2

About Us

At Logicalis Asia Pacific, this is where you belong, grow, and thrive — at one of APAC's leading AI-driven technology integrators.

As the Architects of Change™, we combine global expertise with local insight to help organisations accelerate their journey toward becoming AI-ready enterprises. With 7,000+ professionals across 30 territories and more than 10,000 clients worldwide, we deliver lifecycle services across cloud, connectivity, collaboration, cybersecurity, and managed services — providing real-time visibility and intelligence across our clients' digital ecosystems.

You'll belong as part of a collaborative regional team embedded within a global organisation. You'll grow through hands-on experience with the world's leading technology partners, supported by investment in certifications, consulting capability, and cross-border opportunity. And you'll thrive in a culture built on inclusion, trust, and continuous improvement.

Logicalis is proud to be a Great Place to Work® Certified™ organisation across multiple APAC markets — because the commitment we bring to our clients belongs equally to our people.

Join us and help shape the future of technology across APAC.

The role is part of our Global SOC team, tasked to deliver Managed Security Services (MSS) and help customers achieve its business goals & objectives by re-imagining cybersecurity as one of its business enabler. The role reports to SOC vertical based in Singapore.

Its great opportunity to put your past experiences in building a world class SOC and address cybersecurity challenges of organizations in the region. It provides exposure to wide variety of security technologies, and provides opportunity for the candidate to pioneer in developing SOC and build new MSS offerings.

Job Responsibilities:

• Work in 24x7 shift environment to handle security incidents and provide level two (L2) support during analysis & investigations to identify the root cause (RCA).
• Provide detailed remediation recommendation to customers for the incidents within agreed SLAs, and if required assist them during remediation implementation.
• Execute SOC playbooks, Standard operating procedure (SOP), knowledge base to minimize the security incident impact and perform detailed investigation on the infected assets.
• Escalate critical incidents to 3rd level support team, for further analysis & investigations, and demonstrate excellent collaboration skills for timely resolution to minimize impact to customers.
• Review 3rd party threat intel feeds and integrate them into MSS platforms to provide value to our MSS customers.
• Prepare SOC monthly & QSPR reports, which includes customization based on business requirements and present them to customers during monthly meetings, highlighting risks and mitigation plans.
• Coordinate and lead weekly incident review meetings with the customer to assess and discuss ongoing incidents, resolutions, and improvements.
• Support the SOC Engineering team in ensuring the health and functionality of SOC tools to prevent incidents from being missed due to tool malfunctions.
• Enable regional L1 Security Analysts to deliver seamless L1 support by developing SOC playbooks, relevant and sufficient knowledge base.

Required Qualifications:

Essential

• Candidate should have at least 4 years of experience working in SOC and MSS environments, with a bachelor’s degree in computer science/IT/Information security.
• Excellent hands-on experience on incident analysis using SIEM platforms such as Microsoft Sentinel, Devo, Splunk, IBM QRadar.
• Hands on experience on any Endpoint Protection (EPP) or Endpoint Detection Response (EDR) technologies. Preferred if Microsoft Defender, S1 and CrowdStrike.
• Exposure to firewall technologies such as Cisco, Palo Alto, Checkpoint, Fortinet.
• Good understanding of WIN, LINUX environments and well versed with basic LINUX commands and troubleshooting, with a proven Unix (Solaris, Linux, BSD) experience.
• Knowledge on any shell scripting language, and to apply them to automate mundane operations tasks.
• Candidate should have at least one cybersecurity industry certification such as CompTia, CEH, CHFI.
• Good understanding of basic network concepts and advantage if exposure to cloud technologies.
• Lateral thinking combined with excellent troubleshooting skills, preferably with experience following ITIL standards
• Excellent English communication skills (verbal and written) combined with professional telephone manner.
• Ability to communicate verbally in Mandarin, Cantonese, Bahasa Malayu. Bahasa Indonesia

Desirable

• Advantage if candidate should have at least one SANS/CompTIA certification.
• Experience in Forensics and Incident Response
• Having experience in security standards viz., ISO 27001:2013, NIST, CIS etc

Interested applicants are invited to apply via our careers portal. Only shortlisted candidates will be notified.

As part of our recruitment process, we collect and process personal data relating to job applicants. By submitting your application, you consent to the collection, use, and/or disclosure of your personal data in accordance with our Data Protection Notice for Job Applicants.

At Logicalis, we are committed to creating a diverse and inclusive workplace where everyone can thrive.