Senior Cybersecurity Analyst: Incident Response & Threat Hunting

Tech Staffing; Kuala Lumpur; On-site; MYR 90,000 - 150,000; Full time

Job summary

Tech Staffing in Kuala Lumpur is seeking an experienced Security Incident Response Specialist to lead incident workflow automation, monitor threats, and support the SOC L1/L2 analysts in incident response and threat hunting. The role emphasizes cyber threat analysis, log inspection, and real-time monitoring across multiple data sources.

Candidates should bring at least 5 years in SIEM/incident response, with hands-on experience in Azure Sentinel, QRadar, or Splunk.

Qualifications

• Minimum 5 years experience in SIEM and/or response to information security threats or incidents.
• Experience in Azure Sentinel, QRadar or Splunk.
• Strong understanding of email security, forensics, monitoring and incident response, vulnerability assessment, and web app firewall.

Responsibilities

• Develop incident response workflow that can be automated.
• Perform security monitoring gap analysis and build processes/frameworks for continuous evaluation and increased detection coverage.
• Support SOC L1/L2 Analysts during incident response, event monitoring and threat hunting activities.
• Provide cyber threat analysis support, research, and remediation recommendations.
• Analyze logs from host, network, firewall, IDS to identify threats to network security.
• Perform real-time monitoring and analysis of security events from multiple sources.
• Triage security events to determine priority and severity.
• Proactively review customer environments for suspicious behavior across network, host, and logs data.
• Assist in developing analytic signatures to identify suspicious and malicious behavior.

Skills

Incident response

Threat hunting

Security monitoring

Log analysis

SOC collaboration

Tools

Azure Sentinel

QRadar

Splunk

Job description

Tech Staffing in Kuala Lumpur is seeking an experienced Security Incident Response Specialist to lead incident workflow automation, monitor threats, and support the SOC L1/L2 analysts in incident response and threat hunting. The role emphasizes cyber threat analysis, log inspection, and real-time monitoring across multiple data sources.

Candidates should bring at least 5 years in SIEM/incident response, with hands-on experience in Azure Sentinel, QRadar, or Splunk.