Lead Incident Response & Threat Hunter

Ensign Services; Kuala Lumpur; On-site; MYR 70,000 - 130,000; Full time

Job summary

Ensign Services is seeking a skilled SOC Analyst to lead incident response, perform forensic analysis, and develop detection capabilities. You will work with cross-functional teams to identify root causes and improve defense effectiveness.

The role requires hands-on experience with SIEM/EDR/IDS and a strong understanding of TTPs, MITRE ATT&CK, and cloud security monitoring. Strong communication and mentoring skills are essential for success.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Strongly preferred certifications.
• Experience in SOC operations, incident response, or threat detection is desirable.
• Applicants should demonstrate solid analytical and communication skills.

Responsibilities

• Lead high-severity incident response and containment activities across IT and business units.
• Conduct forensic analysis on endpoints, networks, and logs to determine root cause.
• Develop detection use cases and correlation rules from threat intel and MITRE ATT&CK.
• Perform proactive threat hunting using SIEM, EDR, and intel feeds.
• Fine-tune alerts and playbooks to reduce false positives and improve SOC efficiency.
• Mentor L1/L2 analysts and provide guidance and quality review of investigations.
• Serve as escalation point for complex security issues and investigations.
• Contribute to post-mortems and propose security posture improvements.
• Collaborate with red/purple teams and engineering to validate defenses.

Skills

Analytical thinking

Problem-solving

Communication skills

Leadership of investigations

Cross-functional collaboration

Education

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field

Tools

SIEM

EDR

IDS/IPS

SOAR

Threat intel feeds

Python

PowerShell

Bash

Windows

Linux

AWS/Azure security monitoring

Job description

Ensign Services is seeking a skilled SOC Analyst to lead incident response, perform forensic analysis, and develop detection capabilities. You will work with cross-functional teams to identify root causes and improve defense effectiveness.

The role requires hands-on experience with SIEM/EDR/IDS and a strong understanding of TTPs, MITRE ATT&CK, and cloud security monitoring. Strong communication and mentoring skills are essential for success.