Cybersecurity Lead - Incident Response & Threat Hunting

NEXT Ventures; Kuala Lumpur; On-site; MYR 300,000 - 540,000; Full time

Job summary

NEXT Ventures in Kuala Lumpur seeks a Cybersecurity Lead to serve as the senior technical authority for threat detection, incident response, and risk reduction. You will guide the security analysis team and collaborate with Engineering, DevOps, IT, Compliance, and leadership to ensure controls support business resilience.

You will drive detection engineering, threat hunting, and incident response, while coordinating with product and engineering to embed security into design and remediation.

Qualifications

• 7+ years in cybersecurity with leadership/mentoring experience
• Experience handling high-severity incidents and guiding analysts
• Strong knowledge of attack frameworks, IR lifecycle and security controls
• Familiarity with MITRE ATT&CK, NIST CSF, CIS Controls and ISO 27001 (where applicable)
• Industry certifications (e.g., CISSP/GCIH/GCFA/OSCP/CISM) are a plus

Responsibilities

• Lead threat detection, incident response and risk reduction for high-severity incidents.
• Define and improve investigation methodologies, IR workflows and evidence handling.
• Lead root cause analysis for major incidents and ensure preventive actions are tracked.
• Drive detection engineering: close gaps, tune rules, define use cases and telemetry quality.
• Map security practices to frameworks and provide evidence for audit readiness.
• Report trends and metrics to leadership in business language.
• Run SOC operations: monitoring, triage, investigation, escalation and reporting.
• Coach analysts through case reviews and structured learning plans.

Skills

Threat detection

Incident response

Threat hunting

Detection engineering

MITRE ATT&CK

Cloud security

Automation

Forensics

Leadership

Job description

NEXT Ventures in Kuala Lumpur seeks a Cybersecurity Lead to serve as the senior technical authority for threat detection, incident response, and risk reduction. You will guide the security analysis team and collaborate with Engineering, DevOps, IT, Compliance, and leadership to ensure controls support business resilience.

You will drive detection engineering, threat hunting, and incident response, while coordinating with product and engineering to embed security into design and remediation.