Senior Cyber Incident Response Lead & Forensics

XL Axiata; Kuala Lumpur; On-site; MYR 240,000 - 300,000; Full time

Job summary

XL Axiata in Malaysia seeks an Incident Response Lead to steer cyber incident detection, investigation, containment, eradication, recovery, and post-incident activities across the Axiata Cyber Fusion Center (ACFC). You will work with SOC, Threat Intelligence, and technology teams to strengthen cyber resilience.

You will lead incident response, digital forensics, malware analysis, and escalation processes, driving MITRE ATT&CK-aligned threat hunting and SOAR initiatives while coordinating with

Qualifications

• Bachelor's Degree in Cyber Security, Information Security, Computer Science, Information Technology, or related discipline.
• Master's degree or relevant advanced studies is an added advantage.

Responsibilities

• Lead end-to-end management of cyber security incidents, ensuring appropriate prioritization, investigation, containment, eradication, and recovery activities.
• Act as the primary escalation point for high-severity security incidents and coordinate incident response activities across OpCos and stakeholders.
• Direct cyber incident bridge calls and crisis management activities during major security incidents.
• Ensure incident response activities are executed in accordance with established SLAs, regulatory requirements, and organizational policies.
• Develop and maintain incident response playbooks, runbooks, escalation matrices, and standard operating procedures (SOPs).
• Conduct post-incident reviews, root cause analysis, lessons learned sessions, and track remediation actions.
• Provide guidance and oversight to SOC analysts and managed security service providers to improve detection accuracy, triage quality, and investigation effectiveness.

Skills

Analytical skills

Stakeholder management

Cross-functional leadership

Automation scripting

Pressure management

Education

Bachelor's Degree in Cyber Security

Master's degree (advantage)

Tools

SIEM: Microsoft Sentinel

EDR/XDR: CrowdStrike

EDR/XDR: Microsoft Defender

SOAR platforms

Threat Intelligence platforms

Cloud security technologies

Job description

XL Axiata in Malaysia seeks an Incident Response Lead to steer cyber incident detection, investigation, containment, eradication, recovery, and post-incident activities across the Axiata Cyber Fusion Center (ACFC). You will work with SOC, Threat Intelligence, and technology teams to strengthen cyber resilience.

You will lead incident response, digital forensics, malware analysis, and escalation processes, driving MITRE ATT&CK-aligned threat hunting and SOAR initiatives while coordinating with