Senior SOC Engineer

Hytech Consulting Management Sdn Bhd; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Benefits offered by this job

Public transport access

Corporate insurance (dental, optical,–

Gym and fitness claims

Ongoing training and career growth

Job summary

Hytech Consulting Management Sdn Bhd is seeking a senior cybersecurity professional to join its security operations team in Malaysia. The role emphasizes detection engineering, incident response, threat hunting and threat intelligence across Windows and Linux environments.

You will work with SIEM/XDR platforms, implement security tooling, and drive proactive security measures with hands-on technique and practical problem solving.

Qualifications

• Expertise across penetration testing, incident response and threat hunting.
• Hands-on experience with SIEM/XDR technologies and security tooling.
• Strong understanding of logs, detection logic and threat intelligence.

Responsibilities

• Implement and manage security tools and conduct POCs for new products.
• Investigate alerts end-to-end and perform root cause analysis.
• Develop and maintain SOC detection programs across log sources.
• Perform breach and attack simulations to identify gaps.
• Review and create cybersecurity SOPs and playbooks.

Skills

Penetration Testing

Digital Forensic

Incident Response

Threat Intelligence

Threat Hunting

Active Directory Assessment

Configuration Assessment

Compromise Assessment

Blue Team Operations

Security Monitoring

Automation Scripting

Tools

OpenSearch

ElasticSearch

Wazuh

Splunk Free

pfSense

Active Directory

Job description

Hytech is a management consulting company headquartered in Australia and Singapore, focusing on providing digital transformation solutions for the fintech and Financial Services industries. Our services cover multiple areas such as back-office operation support, Human Resource Planning, payment systems, and risk control, committed to providing comprehensive and professional service support to clients.

With a team of over 2,000 professionals worldwide, we have deep industry insights and localization implementation capabilities to ensure efficient business progress while complying with local regulations. Hytech always focuses on mid- and back-end solutions, without involving any front-end or transaction-related businesses, continuously helping customers achieve secure, compliant, and sustainable digital transformation.

Job Description

• Implement & manage the security tools that are currently used as required.
• Involve into POC for any new security products that will be used in the future.
• Write, review & enhance the cybersecurity SOP & playbook as required.
• Investigate the alerts from different security technologies (SIEM, XDR, Anti-Malware, Email Security etc) end-to-end, perform root cause analysis, and mitigate security threats.
• Analyse the emerging threat & provide actionable threat intelligence.
• Perform threat hunting periodically based on the latest threat intelligence.
• Create & review use cases based on the latest threat intelligence.
• Implement & perform Breach & Attack Simulation within the environment to identify & close the possible gaps between the latest threat & the current capabilities of security tools.
• Implement & manage honeypots to identify & analyse the potential threat that may be targeting the environment.

Requirements

• Passionate in Cybersecurity, interested in different aspects of technical expertise in Cybersecurity, which includes (but not limited to): Penetration Testing, Digital Forensic & Incident Response, Threat Intelligence, Threat Hunting, Active Directory Assessment, Configuration Assessment, Compromise Assessment etc.
• Willingness to solve the challenges in a practical/hands-on manner.
• Hands-on experience in different types of OS (Mainly Windows 10/11, Windows Server 2022/2025, Rocky Linux, Amazon Linux, Debian & their derivatives), experienced in macOS will be a plus.
• Understand (on a high level) how different technologies work, such as Active Directory, Databases, EDR/XDR, Anti-Malware, Firewall, WAF, IDS/IPS, VPN etc.
• Keep up to date with the latest technologies, threats & vulnerabilities.
• Understand different types of logs, and be able to analyse & correlate based on different types of logs.
• 7+ years of experience in security operations, detection engineering, incident response, threat hunting, Blue Team operations, or security monitoring platform development.
• Expert-level SOC detection capability, with the ability to design detection programs across attack paths, log sources, detection logic, false positive reduction, and response workflows.

Good to Have

• Ability to perform automation when required, with any programming language such as PowerShell, Bash, Python, Java, Go.
• Hands-on experience in setting up a home lab & configuring different technologies, including but not limited to: SIEM (Eg: OpenSearch, ElasticSearch, Wazuh, Splunk Free), Firewall (Eg: pfSense), Active Directory, VPN, vulnerable VMs etc.
• Familiar (at a high level) with different standards, guidelines & best practices, such as MITRE ATT&CK, ISO 27001, NIST, PCI DSS, CIS Benchmark etc.
• Pursue/Obtained Cybersecurity Certification, such as CompTIA, EC-Council, ISC2, ISACA, INE, OffSec etc.
• Experienced in multiple offerings in AWS, such as EC2, GuardDuty, ALB, S3 etc.
• Maintain a personal blog on the review/introduction of certain technologies/skills/certifications.

What We Offer

• Easy access to public transportation (LRT & KTM).
• Corporate insurance coverage, including dental, optical, and outpatient claims.
• Gym and fitness claims.
• Ongoing training and development opportunities.
• Exposure to exciting projects that support career growth and professional development.