Senior Security Threat Hunter & Incident Response

GXS Bank; Selangor; On-site; MYR 90,000 - 130,000; Full time

Job summary

GXS Bank is seeking a Security Analyst (Intelligence - Operations) in Malaysia to act as Tier 2 escalation for validated threats, perform deep-dive forensics, and lead containment for multi-stage attacks. You will maintain SOC reports, craft SIEM rules, and drive threat hunting using MITRE ATT&CK.

A strong background in SIEM/EDR and cloud security is required. You will mentor junior analysts, review cases for data quality, and collaborate with global teams to improve detection capabilities and

Qualifications

• Experience developing SOC use cases in SIEM and correlation logic.
• Knowledge of Cyber Threat Intelligence and actionable recommendations.
• Strong networking principles understanding (TCP/IP, WANs/LANs, protocols).
• Understanding of common threat vectors (malware, email, websites).
• Experience in security incident management, malware and vulnerability processes.
• IT and system administration skills in modern operating systems.
• Exposure to SIEM, EDR, SOAR, TIP, and ServiceNow tools.
• Some cloud experience with AWS and Azure is valuable.
• Awareness of MITRE ATT&CK framework for threat hunting.
• Ability to translate complex findings into actionable insights.

Responsibilities

• Act as Tier 2 escalation for all validated threats; lead containment and eradication.
• Conduct deep-dive forensic analysis on endpoints, memory and network traffic.
• Maintain SOC reports daily/weekly/monthly and review playbooks.
• Define and maintain SIEM correlation rules and security procedures.
• Threat hunting and detection engineering to identify stealthy threats.
• Develop and deploy custom SIEM/EDR queries for adversary techniques.
• Convert tribal knowledge into automated Level 1 playbooks for juniors.
• Mentor junior analysts and conduct case reviews for data quality.
• Coordinate handovers with global Follow-the-Sun leads for incidents.
• Participate in post-incident reviews to derive lessons learned.
• Provide feedback to enhance detection and response capabilities.
• Contribute to continuous improvement of security operations tooling.

Skills

SOC use cases in SIEM

Cyber Threat Intelligence

Networking principles

Threat vectors awareness

Security incident management

IT & system administration

SIEM, EDR, SOAR, TIP, ServiceNow

Cloud service providers (AWS/Azure)

Splunk ES

Analytical thinking

Threat hunting

Education

Bachelor’s Degree in relevant field

Tools

SIEM

EDR

SOAR

MITRE ATT&CK

Splunk ES

Job description

GXS Bank is seeking a Security Analyst (Intelligence - Operations) in Malaysia to act as Tier 2 escalation for validated threats, perform deep-dive forensics, and lead containment for multi-stage attacks. You will maintain SOC reports, craft SIEM rules, and drive threat hunting using MITRE ATT&CK.

A strong background in SIEM/EDR and cloud security is required. You will mentor junior analysts, review cases for data quality, and collaborate with global teams to improve detection capabilities and