Senior Security Incident Lead & Threat Hunter

Ensign Services; Rawang; On-site; MYR 120,000 - 180,000; Full time

Job summary

Ensign is seeking a Senior SOC Analyst in Malaysia to lead incident response and threat hunting across multiple clients. You will perform advanced forensic analysis, develop detection logic, and mentor junior analysts in a multi-tenant SOC environment.

The role requires a 4+ year track record in SOC, strong SIEM/EDR skills, and the ability to communicate complex findings to executives and clients. A bachelor’s degree in cybersecurity or related field is required.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related discipline (or equivalent hands‑on experience).
• 4+ years of experience in a SOC or cybersecurity operations role, including incident response and threat hunting.
• Prior MSSP or multi-tenant SOC experience is strongly preferred.

Responsibilities

• Lead investigation and incident response activities for high-severity or complex security incidents across multiple clients.
• Act as final escalation point for incidents unresolved by Tier 1 and Tier 2 analysts.
• Conduct advanced forensic analysis of logs, network traffic, endpoints, and malware to identify root cause and scope.
• Perform proactive threat hunting based on current threat intel, TTPs (MITRE ATT&CK), IOCs, and anomalous behavior.
• Develop and refine detection logic, SIEM correlation rules, and EDR/NDR signatures to enhance SOC effectiveness.
• Support incident containment, eradication, and recovery across diverse client environments.
• Collaborate with Threat Intelligence, Engineering, and IR teams to improve tools, data sources, and workflows.
• Identify gaps in telemetry and logging capabilities and propose enhancements.
• Provide technical leadership and mentorship to junior analysts, supporting skill development.
• Conduct post-incident reviews and create RCA and after-action reports for clients.
• Contribute to playbook creation, tuning, and automation, especially within SOAR platforms.
• Interface with client security teams, IT teams, and executives to communicate findings and remediation guidance.
• Ensure SOC processes align with NIST, ISO 27001 and client regulatory requirements (HIPAA, PCI-DSS).
• Lead purple team exercises to test detection coverage and SOC readiness.

Skills

Incident response

Threat hunting

Forensic analysis

Leadership

Mentoring

Client communication

Education

Bachelor's degree in Cybersecurity, Computer Science, or related discipline

Tools

Splunk

MS Sentinel

QRadar

Google SecOps

Devo

CrowdStrike

SentinelOne

NDR

SOAR

Python

Job description

Ensign is seeking a Senior SOC Analyst in Malaysia to lead incident response and threat hunting across multiple clients. You will perform advanced forensic analysis, develop detection logic, and mentor junior analysts in a multi-tenant SOC environment.

The role requires a 4+ year track record in SOC, strong SIEM/EDR skills, and the ability to communicate complex findings to executives and clients. A bachelor’s degree in cybersecurity or related field is required.