Lead Cyber Incident Response & Forensics

Axonect; Kuala Lumpur; On-site; MYR 180,000 - 360,000; Full time

Job summary

Axiata Group is seeking an experienced Incident Response Lead to drive cyber incident detection, investigation, containment, and recovery across the Axiata Cyber Fusion Center (ACFC). You will coordinate SOC analysts, threat intelligence, and operational teams to ensure timely incident handling and continuous improvement.

Responsibilities include leading forensic investigations, threat hunting, MITRE ATT&CK alignment, and automation initiatives, with multi-country collaboration and executive

Qualifications

• Bachelor's degree or higher in a relevant field.
• Experience in incident response, digital forensics, or CSIRT environments is required.
• Strong knowledge of MITRE ATT&CK and threat hunting methodologies.

Responsibilities

• Lead end-to-end cyber security incident response activities with proper prioritization and containment.
• Coordinate crisis management calls and escalation for high-severity incidents.
• Develop and maintain incident response playbooks, runbooks, and SOPs.
• Drive continuous improvement of detection use cases and automation initiatives.

Skills

Incident response

Digital forensics

Malware analysis

Threat hunting

SOC coordination

Education

Bachelor's Degree in Cyber Security, Information Security, Computer Science, Information Technology, or related discipline

Master's degree or relevant advanced studies

Tools

SIEM (MS Sentinel, Splunk, QRadar)

EDR/XDR (CrowdStrike, Defender, Carbon Black)

SOAR platforms

NDR

Threat Intelligence platforms

Email Security platforms

Cloud Security technologies

Forensic tools

Job description

Axiata Group is seeking an experienced Incident Response Lead to drive cyber incident detection, investigation, containment, and recovery across the Axiata Cyber Fusion Center (ACFC). You will coordinate SOC analysts, threat intelligence, and operational teams to ensure timely incident handling and continuous improvement.

Responsibilities include leading forensic investigations, threat hunting, MITRE ATT&CK alignment, and automation initiatives, with multi-country collaboration and executive