Threat Hunter & Incident Response Lead — SOC

GXS Bank; Petaling Jaya; On-site; MYR 90,000 - 130,000; Full time

Job summary

GXS Bank is seeking an experienced SOC professional to join its Security Operations team in Malaysia. The role focuses on escalation management, forensics, containment, and ongoing threat detection across endpoints, networks, and cloud services.

You will develop SIEM use cases, craft automation, and mentor junior analysts while contributing to continuous improvement of security operations and incident response capabilities.

Qualifications

• Experience in developing SOC use cases in SIEM to correlate diverse logs and investigate security alerts.
• Knowledge of Cyber Threat Intelligence, including threat hunting and actionable recommendations.
• Strong understanding of networking principles (TCP/IP, WANs, LANs, common protocols).
• Understanding threat vectors such as malware, email, and websites at medium to high level.
• Strong knowledge of incident management, malware management and vulnerability management processes.

Responsibilities

• Act as the Tier 2 escalation point for all validated threats filtered by the L1 team.
• Conduct deep-dive forensic analysis on endpoints, memory, and network traffic to identify root causes.
• Lead containment and eradication for multi-stage attacks (e.g., Ransomware, BEC).
• Maintain awareness of current threat landscape including malware, phishing, and APTs.
• Create/review/modify documentation to ensure processes and procedures are up to date.
• Daily/Weekly/Monthly SOC reporting.
• Define, create and maintain SIEM correlation rules and playbooks.

Skills

Incident response

Threat hunting

SIEM engineering

EDR & SOAR

MITRE ATT&CK

Forensic analysis

Network fundamentals

Documentation & coaching

Education

Bachelor's Degree in cybersecurity or related field

Tools

Splunk ES

ServiceNow

SIEM tooling

EDR solutions

SOAR platforms

Job description

GXS Bank is seeking an experienced SOC professional to join its Security Operations team in Malaysia. The role focuses on escalation management, forensics, containment, and ongoing threat detection across endpoints, networks, and cloud services.

You will develop SIEM use cases, craft automation, and mentor junior analysts while contributing to continuous improvement of security operations and incident response capabilities.