Senior SOC Incident Response Lead & Threat Hunter

Ensign InfoSecurity; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Ensign InfoSecurity in Malaysia (Kuala Lumpur) is seeking an experienced Senior Incident Response professional to lead high-severity investigations, conduct forensic analyses, and drive proactive threat hunting within a 24x7 SOC environment.

You will mentor junior analysts, refine detection playbooks, and collaborate with engineering and red/purple teams to validate and strengthen defenses against evolving threats.

Qualifications

• Bachelor's degree in a related field.
• Certifications listed (GIAC GCFA/GCIH/GCIA/GDAT, CISSP, OSCP) are highly preferred.
• Strong hands-on experience with security monitoring and detection tools.

Responsibilities

• Lead high-severity incident response and containment activities across IT and business units.
• Conduct in-depth forensic analysis on endpoints, networks, and logs to determine root causes.
• Develop advanced detection use cases and correlation rules based on threat intel and MITRE ATT&CK.
• Perform proactive threat hunting using SIEM, EDR, and threat intel feeds.
• Review and tune alerts, playbooks, and automation to reduce false positives.
• Mentor L1/L2 analysts and act as escalation point for complex issues.
• Collaborate with red/purple teams and engineering to validate defenses.

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field

Tools

SIEM

EDR

IDS/IPS

SOAR

forensic tools

log analysis

malware analysis

packet inspection

scripting (Python, PowerShell, Bash)

Windows

Linux

cloud monitoring (AWS/Azure)

Job description

Ensign InfoSecurity in Malaysia (Kuala Lumpur) is seeking an experienced Senior Incident Response professional to lead high-severity investigations, conduct forensic analyses, and drive proactive threat hunting within a 24x7 SOC environment.

You will mentor junior analysts, refine detection playbooks, and collaborate with engineering and red/purple teams to validate and strengthen defenses against evolving threats.