SOC Engineer

About Hytech Hytech is a leading management consulting firm headquartered in Australia and Singapore, specialising in digital transformation for fintech and financial services organisations. We deliver end-to-end consulting services and provide robust middle- and back-office solutions that enable our clients to optimise operations, enhance efficiency, and stay ahead in a fast-evolving digital landscape. With more than 2,000 professionals worldwide, Hytech has a strong and growing international presence, with offices across Australia, Singapore, Malaysia, Taiwan, the Philippines, Thailand, Morocco, Cyprus, Dubai, and beyond. About the Role: As a SOC Engineer, you will be responsible for designing, implementing, and managing security systems within an organization's SOC. They play a crucial role in monitoring, analysing, and responding to security threats while maintaining and improving security infrastructure. Job Responsibilities: Implement and manage the security tools that are currently being used as required. Involved in POC for any new security products that will be used in the future. Write, review and enhance the cybersecurity SOP and playbook as required. Investigate on the alerts from different security technologies (SIEM, XDR, Anti-Malware, Email Security etc.) end-to-end, perform the root cause analysis, and mitigate the security threats. Analyze the emerging threat & provide actionable threat intelligence. Perform threat hunting periodically based on the latest threat intelligence. Create and review use case based on the latest threat intelligence. Job Requirements: Minimum Diploma in Cybersecurity, Computer Science, Information Technology, or a related field. Passionate in Cybersecurity, interested in different aspects of technical expertise in Cybersecurity, which includes (but not limited to): Penetration Testing, Digital Forensic & Incident Response, Threat Intelligence, Threat Hunting, Active Directory Assessment, Configuration Assessment, Compromise Assessment etc. Willingness to solve the challenges in a practical/hands-on manner. Hands-on experience in different types of OS (Mainly Windows 10/11 and Linux); experienced in macOS will be a plus. High level of understanding on how different technologies work, such as Active Directory, Databases, EDR/XDR, Anti-Malware, Firewall, WAF, IDS/IPS, VPN etc. Keep up to date with the latest technologies, threats and vulnerabilities. Understand different types of logs, and able to analyze and correlate based on different types of logs. Good to Have: Ability to perform automation when required, with any programming language such as PowerShell, Bash, Python, Java, Go. Hands-on experience in setting up a home lab and configuring different technologies, including but not limited to: SIEM (e.g.: OpenSearch, ElasticSearch, Wazuh, Splunk Free), Firewall (e.g.: pfSense), Active Directory, VPN, vulnerable VMs etc. Strong knowledge on different standards, guidelines and best practices, such as ISO 27001, NIST, PCI DSS, CIS Benchmark etc. Obtained Cybersecurity Certification, such as CompTIA, EC-Council, ISC2, ISACA, INE, OffSec etc. Experienced in multiple offering in AWS, such as EC2, GuardDuty, ALB, S3 etc. ◦ Maintain a personal blog on the review/introduction of certain technologies/skills/certifications What We Offer Easy access to public transportation (LRT & KTM). Transportation allowance. Corporate insurance coverage, including dental, optical, and outpatient claims. Gym and fitness claims. Ongoing training and development opportunities. Exposure to exciting projects that support career growth and professional development.