advanced cyber security incident responder

RecruitFirst Pte Ltd; Malaysia; On-site; MYR 89,280 - 167,400; Full time

Job summary

RecruitFirst Pte Ltd is seeking an Advanced Cyber Security Incident Responder to monitor, investigate, triage, and respond to cybersecurity incidents across our enterprise. You will collaborate with global IT and security teams to reduce cyber risk and strengthen the organization’s security posture.

The role requires experience in SOC environments, proficiency with security tools like Microsoft Sentinel and Defender XDR, and the ability to work across global time zones.

Qualifications

• Bachelor's degree or equivalent in CS/IT/InfoSec.
• 3–5 years in Cyber Security Operations or Incident Response.

Responsibilities

• Monitor, investigate, triage and respond to cybersecurity incidents across the enterprise.
• Lead threat hunting activities and support continuous detection improvements.

Skills

Cyber security operations

Incident response

Threat hunting

Security monitoring

SOAR

Azure

Microsoft 365

Windows admin

Education

Bachelor's degree in Computer Science / Information Security / IT

Tools

Microsoft Sentinel

Microsoft Defender XDR

Job description

advanced cyber security incident responder

Overview

Job-type Full-Time Job Category Industrial Engineering Industries Engineering Salary MYR 8,000 - 15,000 /Month

Who you\'ll be working for

The client is a global automation and warehouse robotics company.

What requirements you\'ll need to be eligible

• Must be willing to work in shifts to work across global time zones
• IT Experience Or Bachelor\'s degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent practical experience.
• Minimum 3-5 years of experience in Cyber Security Operations, Incident Response, Threat Hunting, or Security Monitoring.
• Experience working in a 24x7 SOC or shift-based operational environment is an advantage.
• Strong knowledge of Windows operating systems, system administration, troubleshooting, and enterprise IT environments.
• Ability to identify pattern/ issues and risk in the data
• Good Understanding of SOAR technology
• Understanding of Azure, Microsoft 365, and cloud security monitoring concepts.
• Experience investigating cloud, identity, and endpoint-based security incidents.
• Familiarity with malware analysis is a plus.
• Understanding of common network services (Web, mail, DNS, authentication).
• Understanding of common APT, Cyber Crime and other associated tactics.
• Hands-on experience in the field of IT security (Threat prevention, SIEM, Endpoint protection).
• Previous hands on scripting or programming experience is a plus
• CISSP, CISM or related SANs certification is a plus.
• Experience with host-centric detection and response skills.

What you\'ll be doing on the job

Role Summary/Purpose

The Advanced Cyber Security Incident Responder is responsible for monitoring, investigating, triaging, and responding to cybersecurity incidents across the enterprise within established operating procedures.

The role serves as an advanced cyber security incident responder, conducting advanced investigations, threat hunting activities while supporting continuous improvement of detection and response capabilities. The successful candidate will work closely with global IT and security teams to reduce cyber risk and strengthen the organization\'s security posture.

Your responsibilities

• Perform daily security monitoring, incident triage, investigation, containment, and response activities in accordance with established SOC procedures and service level agreements (SLAs).
• Monitor, investigate, and respond to security alerts using Microsoft Sentinel, Microsoft Defender XDR, and other security technologies.
• Ability to identify issues/ compromised computers using logs, live response, and related computer-centric evidence sources
• Lead small to medium-size projects involving endpoints, cloud platforms, and identities.
• Conduct threat hunting activities to proactively identify malicious activity.
• Support digital forensic investigations and evidence preservation.
• Provide mentoring and technical guidance to junior analysts.
• Document investigations, findings, and remediation actions accurately within case management systems.
• Contribute to security use-case tuning and continuous detection improvement. Support automation initiatives through SOAR playbooks and workflow optimization.
• Demonstrate proficiency in event analysis and tool utilization (identification, response, escalation)
• Exercise attention to detail and due care regarding work-related communication and documentation
• Review reports/ workbooks for any anomalies or issues
• Exhibit willingness to learn, a desire to collaborate with others, and the drive to take on additional responsibilities when called upon
• Pursue job-related growth and knowledge via higher education, certification, and training
• Maintain awareness of changing processes, procedures, and standards critical to job performance
• Other duties as assigned
• Ability to manage multiple investigations and priorities simultaneously.

Sound interesting?