Digital Forensic Incident Response (DFIR) L3

Tentacle Tech; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Tentacle Tech is seeking an experienced Digital Forensic Incident Response (DFIR) L3 to support a high‑performing cybersecurity team within the financial services sector in Malaysia.

The role focuses on honeypot infrastructure, threat detection, threat hunting, and advanced incident investigation across SIEM, EDR, and threat‑analysis environments. Strong DFIR background and relevant certifications are required.

Qualifications

• Bachelor’s degree in Computer Science, Security, Network, Computer Systems, or a related discipline.
• Minimum 5 years of IT Security experience, preferably within Financial Services.
• Strong experience in threat detection, threat hunting, SIEM, and EDR.
• Hands-on exposure to honeypots, honeynets, deception technologies, cyber ranges, or threat-analysis labs is highly preferred.
• Experience with malware, binary, script, log, and malicious-email analysis.
• DFIR or incident-response experience is advantageous.
• Relevant certifications such as SANS GCIH, SANS GREM, CEH, or CompTIA CySA+ are a plus.

Responsibilities

• Honeypot and honeynet infrastructure maintenance.
• Threat detection and threat hunting.
• SIEM and EDR tuning.
• Malware and artefact analysis.
• Compromise assessments.
• Cyber range and threat-lab maintenance.
• IOC investigation and detection improvement.

Skills

Threat detection

Threat hunting

DFIR

Malware analysis

Scripting/automation

Analytical skills

Independent & collaborative work

Education

Bachelor’s degree in Computer Science or related

Tools

SIEM

EDR

Honeypots

Threat-analysis labs

Job description

Digital Forensic Incident Response (DFIR) L3

Tentacle Tech is an IT and software development consulting company serving major enterprises in Malaysia. We provide technology consulting, software development, and IT services across multiple industries.

The Role

We are seeking an experienced Digital Forensic Incident Response (DFIR) L3 to support a high-performing cybersecurity team within the financial services sector.

This role has a strong focus on honeypot infrastructure, threat detection, threat hunting, and advanced incident investigation. You will help strengthen proactive detection capabilities across SIEM, EDR, threat‑analysis environments, and security operations.

What You’ll Do

• Develop, maintain, and support honeypots, honeynets, and related infrastructure
• Act as a subject matter expert for honeypot and threat‑analysis environments
• Develop and maintain threat‑analysis labs, virtual machines, and cyber ranges
• Build and fine‑tune SIEM queries, dashboards, alerts, and detection rules
• Conduct proactive threat hunting and compromise assessments across systems and networks
• Investigate security alerts using SIEM, EDR, logs, artefacts, and Indicators of Compromise (IOCs)
• Analyse malicious binaries, scripts, web scripts, and malspam emails
• Identify attacker behaviour and translate findings into improved threat‑detection use cases
• Develop scripts, automation, and internal security tools to support threat intelligence and incident response
• Evaluate and fine‑tune EDR and other detective security solutions
• Maintain and clean IOC datasets to improve detection quality
• Document investigation findings, remediation actions, and security‑control gaps

What We’re Looking For

• Bachelor’s degree in Computer Science, Security, Network, Computer Systems, or a related discipline
• Minimum 5 years of IT Security experience, preferably within Financial Services
• Strong experience in threat detection, threat hunting, SIEM, and EDR
• Hands‑on exposure to honeypots, honeynets, deception technologies, cyber ranges, or threat‑analysis labs is highly preferred
• Experience with malware, binary, script, log, and malicious‑email analysis
• DFIR or incident‑response experience is advantageous
• Relevant certifications such as SANS GCIH, SANS GREM, CEH, or CompTIA CySA+ are a plus
• Strong analytical, investigative, and problem‑solving skills
• Ability to work independently and collaborate with SOC, threat intelligence, and security engineering teams

Key Responsibilities

• Honeypot and honeynet infrastructure
• Threat detection and threat hunting
• SIEM and EDR tuning
• Malware and artefact analysis
• Compromise assessments
• Cyber range and threat‑lab maintenance
• IOC investigation and detection improvement

Job Summary

We’re looking for an experienced Digital Forensic Incident Response (DFIR) L3 with strong exposure to honeypot environments, threat detection, threat hunting, malware analysis, SIEM, and EDR. The role supports a major financial services environment in Malaysia and focuses on strengthening proactive threat detection and incident‑response capabilities.

Tentacle Technologies was founded in November 2001 with humble beginnings. Headquartered in Malaysia, today we operate in countries like Singapore, India and the Philippines. Our core services are Business Consulting, Software Development, Quality Assurance & IT solutions in Digital Transformation. We are techies with the right techniques to revamp businesses!

Unlike most of the tech companies that have been around since 2000’s, Tentacle Technologies understands the evolution of technology and accepts it as an integral part of future businesses. Our journey started sixteen years ago and our passion for technology has created a positive impact. From what started as a small team, we have grown to a team of 350 employees globally.

A dozen years in business, never lost a client, 350+ technology professional on board, more than 100 client partnerships, do we have to say more?

Tentacle Technologies was founded in November 2001 with humble beginnings. Headquartered in Malaysia, today we operate in countries like Singapore, India and the Philippines. Our core services are Business Consulting, Software Development, Quality Assurance & IT solutions in Digital Transformation. We are techies with the right techniques to revamp businesses!

Unlike most of the tech companies that have been around since 2000’s, Tentacle Technologies understands the evolution of technology and accepts it as an integral part of future businesses. Our journey started sixteen years ago and our passion for technology has created a positive impact. From what started as a small team, we have grown to a team of 350 employees globally.

A dozen years in business, never lost a client, 350+ technology professional on board, more than 100 client partnerships, do we have to say more?

Tentacle Technologies was founded in November 2001 with humble beginnings. Headquartered in Malaysia, today we operate in countries like Singapore, India and the Philippines. Our core services are Business Consulting, Software Development, Quality Assurance & IT solutions in Digital Transformation. We are techies with the right techniques to revamp businesses!

Unlike most of the tech companies that have been around since 2000’s, Tentacle Technologies understands the evolution of technology and accepts it as an integral part of future businesses. Our journey started sixteen years ago and our passion for technology has created a positive impact. From what started as a small team, we have grown to a team of 350 employees globally.

A dozen years in business, never lost a client, 350+ technology professional on board, more than 100 client partnerships, do we have to say more?