Senior DFIR Lead: Incident Response & Threat Hunting

RGA; Kuala Lumpur; Vor Ort; MYR 180.000 - 300.000; Vollzeit

Zusammenfassung

RGA in Malaysia is seeking a senior DFIR Analyst to lead complex cyber investigations, strengthen enterprise resilience, and guide security teams across global environments. You will operate hands-on in DFIR, provide strategic advisory, and deliver executive briefings and post-incident reviews while collaborating with legal, compliance, and business stakeholders.

This role requires strong forensics, cloud and endpoint expertise, and the ability to drive enhancements through AI-assisted workflows

Qualifikationen

• 5+ years in incident response or DFIR.
• Experience leading major cyber incidents including ransomware, BEC, insider threats, cloud compromise, and APTs.
• Strong digital forensics capability using industry-standard tools.
• Experience with Splunk, Defender, CrowdStrike, SIR, and cloud security technologies.

Aufgaben

• Lead enterprise incident response and cyber crisis engagements from detection through recovery.
• Direct host, network, cloud, identity, and SaaS investigations across Windows, Linux, macOS, M365, AWS, Azure, and hybrid environments.
• Perform advanced threat hunting and compromise assessments using SIEM, EDR, forensic, and threat intelligence platforms.
• Develop containment, eradication, and remediation strategies aligned to business risk.
• Produce executive briefings, technical reports, board-ready updates, and post-incident reviews.
• Partner with legal, compliance, privacy, audit, and external stakeholders when required.
• Drive adoption of AI-assisted workflows to improve investigation speed, reporting quality, and operational efficiency.
• Support the 24/7 on-call rotation.

Kenntnisse

Incident response

DFIR

Security operations

Threat hunting

Digital forensics

Executive communications

Ausbildung

Bachelor's degree

Certifications (Security)

Tools

Splunk

Microsoft Defender

CrowdStrike Falcon

ServiceNow SIR

FTK

Encase

X-Ways

Magnet AXIOM

SIFT

Jobbeschreibung

RGA in Malaysia is seeking a senior DFIR Analyst to lead complex cyber investigations, strengthen enterprise resilience, and guide security teams across global environments. You will operate hands-on in DFIR, provide strategic advisory, and deliver executive briefings and post-incident reviews while collaborating with legal, compliance, and business stakeholders.

This role requires strong forensics, cloud and endpoint expertise, and the ability to drive enhancements through AI-assisted workflows