Senior Incident Response Specialist, Cyber Security-Malaysia

Role Mission

The Senior Analyst - Cyber Security Incident Response is responsible for monitoring, detecting, and analyzing cybersecurity incidents through the Security Operations Centre (SOC) platform. The role supports the end-to-end incident lifecycle — including triage, investigation, containment, and closure — ensuring timely response to security events and maintaining cyber resilience. This role acts as the Level 2 (L2) Incident Responder, bridging SOC analysts and Incident Response management by performing deep technical analysis and coordinating with internal teams for resolution.

Accountabilities:

• Perform end-to-end incident triage and investigation of security alerts escalated from L1 SOC analysts.

• Ensure timely incident analysis, containment, and escalation aligned with MTTD and MTTR goals.

• Support the SIEM platform (Elastic Stack) by fine-tuning existing rules and suggesting new detections.

• Conduct log analysis and correlation across multiple data sources (network, endpoint, and cloud).

• Create and maintain incident documentation, reports, and lessons learned.

• Support incident response