Senior CyberSOC Incident Response Lead - Hybrid

Nestlé IT & Digital Americas; Kuala Lumpur; Hybrid; MYR 180,000 - 240,000; Full time

Job summary

Nestlé Regional Service Centre is seeking a CyberSOC Incident Response Specialist to lead investigations and response to complex cybersecurity incidents across a global enterprise. You will drive incident response, threat hunting, forensics and continuous security improvements in collaboration with global security teams.

The role includes acting as Incident Commander during major incidents, producing executive deliverables, and mentoring L1/L2 analysts while supporting a 24x7 operational model.

Qualifications

• Bachelor's Degree in Cybersecurity, Computer Science, Information Security or related discipline.
• 6–8 years of experience in Cybersecurity, Security Operations, Incident Response or Digital Forensics.
• Experience managing enterprise-scale cybersecurity incidents from investigation through recovery.
• Strong knowledge of incident response, threat hunting, digital forensics and attacker tactics.
• Hands-on experience with SIEM, EDR/XDR, cloud security, identity security and threat intelligence platforms.
• Proficiency in security query languages or scripting such as KQL, SPL, SQL, Python or PowerShell.

Responsibilities

• Lead end-to-end investigations across endpoints, identity, email, network, cloud and SaaS environments.
• Perform deep-dive analysis using SIEM, telemetry, logs and audits to determine scope and attacker objectives.
• Contain, eradicate and recover with coordinated actions across Security teams and business units.
• Mentor L1/L2 analysts and participate in 24x7 CyberSOC coverage and drills.
• Develop and tune detection analytics and playbooks; map activity to MITRE ATT&CK.

Skills

Cybersecurity expertise

Incident response

Threat hunting

Digital forensics

Scripting (Python/PowerShell)

KQL/SPL/SQL

Communication

MITRE ATT&CK mapping

Education

Bachelor's degree in Cybersecurity or related

Tools

SIEM

EDR/XDR

Cloud security

Identity security

Threat intelligence platforms

Job description

Nestlé Regional Service Centre is seeking a CyberSOC Incident Response Specialist to lead investigations and response to complex cybersecurity incidents across a global enterprise. You will drive incident response, threat hunting, forensics and continuous security improvements in collaboration with global security teams.

The role includes acting as Incident Commander during major incidents, producing executive deliverables, and mentoring L1/L2 analysts while supporting a 24x7 operational model.