Swarovski

Information Security Analyst

Bandar Bayan Baru, MYS Full time

At Swarovski, where innovation meets inspiration, our people desire to explore, experience, and create. We are looking for an Information Security Analyst where you will get a chance to work in a rewarding role within a diverse team that is pushing boundaries. Be part of a truly iconic global brand, learn and grow with us. We’re bold and inventive, revealing astonishing things like no one else can. A world of wonder awaits you.

About the job

Your responsibilities include, but are not limited to:

  • Investigate and respond to security incidents using tools like EDR and phishing detection platforms by following playbooks or taking immediate ad-hoc measures.
  • Analyze malware, adversary TTPs, and threat intelligence aligned with frameworks like MITRE ATT&CK.
  • Conduct vulnerability scans.
  • Collaborate with the core security team, extended stakeholders, and end-users to ensure clear communication and effective resolution.
  • Continuously improve and automate security workflows and use cases.
  • Contribute to the development of detection logic, playbooks, and response strategies.
  • Perform security tests within purple teaming activities.

About you

We are looking for a unique and amazing talent, who brings along the following:

  • Fluency in English be it spoken or written
  • Strong IT skills, such as, Operating system internals for Windows and Linux (e.g., Shells, Process Management, Kernel, File Systems, Access Control), Network protocols (e.g., TCP/IP, DNS, DHCP, HTTP/S), Authentication & Access Management (e.g., Active Directory, Kerberos, MFA, OAuth).
  • Solid understanding of information security principles related to understanding tools, techniques and procedures of threat actors (e.g., Malware, Persistence Mechanisms, Lateral Movement, Defense Evasion, C2), authentication, basic reverse engineering (e.g., file fingerprinting, string analysis, header inspection, identifying obfuscation).
  • Basic scripting/programming skills (e.g. Python) for automation and reverse basic engineering purposes.
  • Strong interest in learning and staying current with security trends and technologies.
  • Soft skills to effectively communicate with technical and non-technical stakeholders.
  • Ideally experience with incident response, endpoint detection, and phishing analysis.
  • Ability to work independently and take ownership of tasks but also as part of a team
  • A university degree related to STEM is a plus.
  • Certifications for language (C1) or technical proficiency (CompTIA, GIAC) are welcome but not required.

What we offer

You can expect a range of benefits, including:

  • Swarovski products discounts
  • Employee Assistance Program
  • Volunteering leave
  • Learning and development programs

Masters of Light Since 1895

Swarovski creates beautiful crystal-based products of impeccable quality and craftsmanship that bring joy and celebrate individuality.

Founded in 1895 in Austria, the company designs, manufactures and sells the world's finest crystal, gemstones, Swarovski Created Diamonds and zirconia, jewelry, and accessories, as well as crystal objects and home accessories. Swarovski Crystal Business has a global reach with approximately 2,400 stores and 6,700 points of sales in around 140 countries and employs more than 18,000 people. Together with its sister companies Swarovski Optik (optical devices) and Tyrolit (abrasives), Swarovski Crystal Business forms the Swarovski Group. A responsible relationship with people and the planet is part of Swarovski’s heritage. Today this legacy is rooted in sustainability measures across the value chain, with an emphasis on circular innovation, championing diversity, inclusion and self-expression, and in the philanthropic work of the Swarovski Foundation, which supports charitable organizations bringing positive environmental and social impact.

Swarovski is an equal opportunity employer. We give our people the guts to celebrate individuality and pride ourselves on creating a workplace where people feel involved, respected, valued, connected, and heard. A place where anyone/everyone belongs. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate based on race, color, religion, marital status, age, national origin, physical or mental disability, medical condition, pregnancy, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under the law of the countries we operate in.