Senior Security Analyst - Threat Hunting & IR Lead

Logicalis; Kuala Lumpur; On-site; MYR 150,000 - 230,000; Full time

Job summary

Logicalis is seeking an experienced SOC professional to lead detection engineering, threat hunting, and incident response across on-prem and cloud environments. You will design SIEM rules, perform threat hunts, and coordinate with internal teams to automate and optimize security operations.

The role requires 8-10 years of SOC experience, strong SIEM and malware analysis skills, and the ability to mentor junior analysts while adhering to ITIL processes.

Qualifications

• 8-10 years of SOC/MSS experience.
• Bachelor's degree in Computer Engineering, CS, Cyber Security or equivalent.
• Hands-on experience with Splunk, QRadar, Azure Sentinel SIEM and Devo.
• Experience with EPP/EDR technologies (e.g., CrowdStrike, Defender).
• Experience with SOAR technologies.
• Malware analysis for Windows and Linux.
• Exposure to firewall technologies (Cisco, Palo Alto, Checkpoint, Fortinet).
• Strong Linux/Unix knowledge and basic commands.
• Scripting to automate tasks.
• Knowledge of cyber threats and threat intel feeds.
• Ability to mentor junior analysts and work in a team.
• SANS certification (GCIH preferred).
• ITIL familiarity.
• Lead SOC SOPs and Threat Intel feeds.

Responsibilities

• Design, develop, and deploy high-fidelity detection rules in SIEM/EDR/MDa systems.
• Lead threat hunting across on-prem and cloud environments with telemetry.
• Develop hypotheses using MITRE ATT&CK and Diamond Model.
• Document hunt procedures and findings for knowledge sharing.
• Contextualize IOCs and TTPs for targeted threats with threat intel teams.
• Lead incident response lifecycle and draft RCA reports.
• Mentor L1/L2 analysts and support tabletop exercises.
• Coordinate with cross-functional teams to automate daily SOC tasks.
• Create and maintain SOC playbooks and runbooks.
• Deliver detailed briefings to clients on priority incidents.

Skills

SOC/MSS experience

Splunk

QRadar

Azure Sentinel

Devo

EPP/EDR

SOAR

Malware analysis

Firewall tech

Linux/Unix

Scripting

Threat intelligence

Mentoring

ITIL

SANS GCIH

Education

Bachelor's degree in Computer Engineering/CS/Cyber Security/InfoSec

Tools

Splunk

IBM QRadar

Azure Sentinel

Devo

SOAR platforms

Job description

Logicalis is seeking an experienced SOC professional to lead detection engineering, threat hunting, and incident response across on-prem and cloud environments. You will design SIEM rules, perform threat hunts, and coordinate with internal teams to automate and optimize security operations.

The role requires 8-10 years of SOC experience, strong SIEM and malware analysis skills, and the ability to mentor junior analysts while adhering to ITIL processes.