Senior Security Detection & Threat Intel Lead

Logicalis; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Job summary

Logicalis, a leader in digital transformation, seeks a seasoned Detection Engineering and Threat Hunting expert to design high-fidelity SIEM detections, build MITRE ATT&CK-aligned use cases, and lead threat intel initiatives. You will mentor analysts, drive incident response, and collaborate with cross-functional teams to strengthen client security postures.

The role requires 8–10 years in SOC/MSS, hands-on experience with Splunk, QRadar, Sentinel, Devo, and EDR; fluency in Linux/Windows,

Qualifications

• Bachelor's degree in Computer Science or Cyber Security or equivalent.
• 8–10 years in SOC and MSS environments.
• Hands-on with Splunk, IBM QRadar, Azure Sentinel and Devo SIEMs.
• Experience with EPP/EDR technologies; CrowdStrike and Microsoft Defender preferred.
• Experience with SOAR technologies.
• Knowledge of malware analysis for Windows/Linux/macOS.
• Understanding of firewall technologies and basic network concepts.
• Proficiency in Unix/Linux and basic scripting.
• Knowledge of threat intel feeds and current cyber threats.
• SANS certification (GCIH preferred).
• Lead teams and develop Threat Intel feeds such as MISP.

Responsibilities

• Design, develop, and deploy high-fidelity detection rules in SIEMs.
• Create MITRE ATT&CK-aligned use cases for detections.
• Conduct detection gap analysis and reduce false positives.
• Tune detection logic across SIEM/EDR to improve accuracy.
• Lead threat hunting campaigns across on-prem and cloud environments.
• Provide actionable threat intelligence to SOC, detection engineering, and IR teams.
• Lead incident response lifecycle and coordinate with stakeholders.
• Mentor L1/L2 analysts and participate in tabletop exercises.
• Develop and maintain playbooks, runbooks, and incident reports.

Skills

SIEM

Threat hunting

MITRE ATT&CK

Incident response

DFIR

Education

Bachelor's degree in Computer Science or Cyber Security

Tools

Splunk

Microsoft Sentinel

Devo

QRadar

EDR

SOAR

Threat intelligence feeds

MISP

Job description

Logicalis, a leader in digital transformation, seeks a seasoned Detection Engineering and Threat Hunting expert to design high-fidelity SIEM detections, build MITRE ATT&CK-aligned use cases, and lead threat intel initiatives. You will mentor analysts, drive incident response, and collaborate with cross-functional teams to strengthen client security postures.

The role requires 8–10 years in SOC/MSS, hands-on experience with Splunk, QRadar, Sentinel, Devo, and EDR; fluency in Linux/Windows,