Security Incident Response & Threat Hunter

Ensign Services; Kuala Lumpur; On-site; MYR 90,000 - 150,000; Full time

Job summary

Ensign Services is seeking an experienced cybersecurity analyst to lead in-depth analysis of security events and coordinate incident responses in a fast-paced environment.

You will investigate malware, phishing, and unauthorized access incidents, perform root cause analysis, and refine detection rules using MITRE ATT&CK methodologies. Collaboration across IT/security teams and ongoing improvement of runbooks are essential.

Qualifications

• Bachelor's degree or higher in cybersecurity, CS, IT, or related field.
• Certifications such as CompTIA CySA+, EC-Council ECIH, GCIA/GCFA/GCIH preferred.

Responsibilities

• Analyze security events escalated by L1 analysts to determine scope, impact and response.
• Investigate security incidents including malware, phishing, unauthorized access, and threats.
• Conduct root cause analysis and recommend remediation actions.
• Use threat intel feeds and tools to enhance detection and investigation.
• Collaborate with IT/security teams to contain and resolve incidents.
• Maintain and improve incident response runbooks and playbooks.
• Tune SIEM rules and alerts to reduce false positives.
• Mentor L1 analysts on incident handling.

Skills

Network protocols

Log analysis

Cybersecurity frameworks

SIEM tuning

EDR/XDR tools

Threat modeling

Education

Bachelor's in Cybersecurity

Tools

Splunk

QRadar

LogRhythm

Job description

Ensign Services is seeking an experienced cybersecurity analyst to lead in-depth analysis of security events and coordinate incident responses in a fast-paced environment.

You will investigate malware, phishing, and unauthorized access incidents, perform root cause analysis, and refine detection rules using MITRE ATT&CK methodologies. Collaboration across IT/security teams and ongoing improvement of runbooks are essential.