Senior Threat Hunter & Detection Engineer Lead

Logicalis; Kuala Lumpur; On-site; MYR 180,000 - 300,000; Full time

Job summary

Logicalis is seeking an experienced SOC professional to lead detection engineering and threat hunting across on‑prem and cloud environments. You will develop SIEM/EDR rules, coordinate incident response, and mentor junior analysts while collaborating with cross‑functional teams.

You will also provide actionable threat intelligence to SOC and IR teams, maintain playbooks, and contribute to forensics and malware analysis efforts as needed.

Qualifications

• Minimum 8–10 years of experience in SOC/MSS environments.
• 0

Responsibilities

• Lead detection engineering and threat hunting activities across on‑premises and cloud environments.
• 1
• Develop and maintain SIEM/EDR rule sets and playbooks to improve detection accuracy.
• 2
• Coordinate incident response lifecycle, including containment, eradication, and recovery.
• 3
• Mentor and supervise L1/L2 SOC analysts and coordinate with cross‑functional teams.
• 4
• Prepare and deliver detailed client briefings on priority incidents and RCA findings.
• 5
• Develop and maintain threat intel feeds and runbooks for proactive defense.
• 6
• Collaborate with Engineering, Red Team, and Risk/Compliance to close gaps.
• 7
• Perform malware analysis and contribute to forensic investigations as needed.

Skills

SOC operations

Threat hunting

Incident response

Team leadership

Mentoring

Tabletop exercises

Threat intelligence

Communication with clients

MITRE ATT&CK

Red/Purple team collaboration

Education

Bachelor's degree in computer engineering, Computer Science, Cyber Security

Tools

Splunk

IBM QRadar

Azure Sentinel

Devo

Cisco

Palo Alto

Check Point

Fortinet

CrowdStrike

Microsoft Defender

SOAR

MISP

Job description

Logicalis is seeking an experienced SOC professional to lead detection engineering and threat hunting across on‑prem and cloud environments. You will develop SIEM/EDR rules, coordinate incident response, and mentor junior analysts while collaborating with cross‑functional teams.

You will also provide actionable threat intelligence to SOC and IR teams, maintain playbooks, and contribute to forensics and malware analysis efforts as needed.