Senior SOC Engineer

Hytech; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Benefits offered by this job

Public transport access

Corporate insurance (dental, optical,

Gym and fitness claims

Training and development opportunities

Career growth opportunities

Job summary

Hytech is a leading security-focused consultancy recruiting for a senior cybersecurity operations expert in Kuala Lumpur. The role involves implementing security tools, leading POC evaluations for new security products, and writing SOPs and playbooks to strengthen defenses.

You will investigate alerts across SIEM/XDR/EDR, perform root-cause analyses, and mitigate threats while producing actionable threat intelligence to inform proactive defenses.

Qualifications

• 7+ years in security operations, detection engineering, incident response or related fields.
• Hands-on with multiple OS platforms (Windows, Linux) and security tools.
• Familiar with MITRE ATT&CK, ISO 27001, NIST, CIS benchmarks and PCI DSS.

Responsibilities

• Implement and manage security tools as required.
• Lead POC assessments for new security products.
• Write and enhance cybersecurity SOPs and playbooks.
• Investigate alerts end-to-end, perform root cause analysis, mitigate threats.
• Analyze threats and provide actionable threat intelligence.
• Conduct threat hunting periodically based on intelligence.
• Create and review use cases from threat intel.
• Perform Breach & Attack Simulation to identify gaps.

Skills

Penetration Testing

Threat Hunting

Incident Response

Threat Intelligence

Blue Team Operations

Log Analysis

Active Directory Assessment

Automation Scripting

Tools

SIEM (OpenSearch/OpenSearch, ElasticSearch, Wazuh, Splunk Free)

EDR/XDR

Firewall/WAF/IDS-IPS

pfSense / VPN

Job description

Hytech is a leading management consulting firm headquartered in Australia and Singapore, specialising in digital transformation for fintech and financial services organisations. We deliver end-to-end consulting services and provide robust middle- and back-office solutions that enable our clients to optimise operations, enhance efficiency, and stay ahead in a fast-evolving digital landscape.

With more than 2,000 professionals worldwide, Hytech has a strong and growing international presence, with offices across Australia, Singapore, Malaysia, Taiwan, the Philippines, Thailand, Morocco, Cyprus, Dubai, and beyond.

Job Description

• Implement & manage the security tools that are currently used as required.
• Involve into POC for any new security products that will be used in the future.
• Write, review & enhance the cybersecurity SOP & playbook as required.
• Investigate the alerts from different security technologies (SIEM, XDR, Anti-Malware, Email Security etc) end-to-end, perform root cause analysis, and mitigate security threats.
• Analyse the emerging threat & provide actionable threat intelligence.
• Perform threat hunting periodically based on the latest threat intelligence.
• Create & review use cases based on the latest threat intelligence.
• Implement & perform Breach & Attack Simulation within the environment to identify & close the possible gaps between the latest threat & the current capabilities of security tools.
• Implement & manage honeypots to identify & analyse the potential threat that may be targeting the environment.

Requirements

• Passionate in Cybersecurity, interested in different aspects of technical expertise in Cybersecurity, which includes (but not limited to): Penetration Testing, Digital Forensic & Incident Response, Threat Intelligence, Threat Hunting, Active Directory Assessment, Configuration Assessment, Compromise Assessment etc.
• Willingness to solve the challenges in a practical/hands-on manner.
• Hands-on experience in different types of OS (Mainly Windows 10/11, Windows Server 2022/2025, Rocky Linux, Amazon Linux, Debian & their derivatives), experienced in macOS will be a plus.
• Understand (on a high level) how different technologies work, such as Active Directory, Databases, EDR/XDR, Anti-Malware, Firewall, WAF, IDS/IPS, VPN etc.
• Keep up to date with the latest technologies, threats & vulnerabilities.
• Understand different types of logs, and be able to analyse & correlate based on different types of logs.
• 7+ years of experience in security operations, detection engineering, incident response, threat hunting, Blue Team operations, or security monitoring platform development.
• Expert-level SOC detection capability, with the ability to design detection programs across attack paths, log sources, detection logic, false positive reduction, and response workflows.

Good to Have

• Ability to perform automation when required, with any programming language such as PowerShell, Bash, Python, Java, Go.
• Hands-on experience in setting up a home lab & configuring different technologies, including but not limited to: SIEM (Eg: OpenSearch, ElasticSearch, Wazuh, Splunk Free), Firewall (Eg: pfSense), Active Directory, VPN, vulnerable VMs etc.
• Familiar (at a high level) with different standards, guidelines & best practices, such as MITRE ATT&CK, ISO 27001, NIST, PCI DSS, CIS Benchmark etc.
• Pursue/Obtained Cybersecurity Certification, such as CompTIA, EC-Council, ISC2, ISACA, INE, OffSec etc.
• Experienced in multiple offerings in AWS, such as EC2, GuardDuty, ALB, S3 etc.
• Maintain a personal blog on the review/introduction of certain technologies/skills/certifications.

What We Offer

• Easy access to public transportation (LRT & KTM).
• Corporate insurance coverage, including dental, optical, and outpatient claims.
• Gym and fitness claims.
• Ongoing training and development opportunities.
• Exposure to exciting projects that support career growth and professional development.