Senior DFIR Lead: Cyber Incident Response & Threat Hunting

Reinsurance Group of America, Incorporated; Kuala Lumpur; Hybrid; MYR 220,000 - 300,000; Full time

Job summary

Reinsurance Group of America, Incorporated seeks a senior incident response professional to lead complex cyber investigations, strengthen enterprise resilience, and guide security teams through critical incidents. This role combines hands-on DFIR expertise with strategic advisory capabilities across global environments.

You will investigate sophisticated attacks, enhance security operations, and translate lessons learned into measurable improvements.

Qualifications

• 5+ years in incident response, DFIR, security operations, or related cybersecurity roles.
• Experience leading major cyber incidents including ransomware, BEC, insider threats, cloud compromise, or supply chain attacks.

Responsibilities

• Lead enterprise incident response and cyber crisis engagements from detection through recovery.
• Direct host, network, cloud, identity, and SaaS investigations across Windows, Linux, macOS, Microsoft 365, AWS, Azure, and hybrid environments.
• Perform advanced threat hunting and compromise assessments using SIEM, EDR, forensics, and threat intel platforms.
• Develop containment, eradication, and remediation strategies aligned to business risk.
• Produce executive briefings, technical reports, board-ready updates, and post-incident reviews.
• Partner with legal, compliance, privacy, audit, and external stakeholders as required.
• Drive adoption of AI-assisted workflows to improve investigation speed and reporting quality.
• Support the 24/7 on-call rotation.

Skills

Incident response

DFIR

Security operations

Threat hunting

Digital forensics

Splunk

Microsoft Defender

CrowdStrike Falcon

ServiceNow SIR

Cloud security

Education

Bachelor's degree in Cybersecurity

Tools

FTK

EnCase

X-Ways

Magnet AXIOM

SIFT

Job description

Reinsurance Group of America, Incorporated seeks a senior incident response professional to lead complex cyber investigations, strengthen enterprise resilience, and guide security teams through critical incidents. This role combines hands-on DFIR expertise with strategic advisory capabilities across global environments.

You will investigate sophisticated attacks, enhance security operations, and translate lessons learned into measurable improvements.