SOC - Threat Hunter

3 days ago

Petaling Jaya, Malaysia DXC Technology Full time

DXC Technology helps global companies run their mission-critical systems and operations while modernizing IT, optimizing data architectures, and ensuring security and scalability across public, private and hybrid clouds. The world's largest companies and public sector organizations trust DXC to deploy services to drive new levels of performance, competitiveness, and customer experience across their IT estates.

**Role Summary**

The Threat Hunter is responsible for proactively identifying advanced threats that evade automated security defenses. By leveraging threat intelligence, hypothesis-driven investigation, and advanced analytical techniques, this role enhances the organization's ability to detect, understand, and respond to sophisticated cyber threats.

**Key Responsibilities**
- ** Proactive Threat Hunting**Actively and iteratively search for hidden or unknown threats that may have bypassed existing security controls.
- ** Incident Pattern Analysis**Investigate past and ongoing incidents to detect patterns, tactics, techniques, and procedures (TTPs).
- ** Hypothesis Development & Testing**Formulate hypotheses based on observed behaviors and intelligence, then test them through data analysis and search queries.
- ** Advanced Tool Utilization**Use SIEM, EDR, and other advanced tools to search for anomalies and suspicious activities across customer environments.
- ** Documentation & Reporting**Produce clear reports and discovery write-ups to communicate threat findings and recommended actions.
- ** Continuous Improvement**Recommend improvements to threat detection and incident response processes based on insights gained through hunts.
- ** Knowledge Sharing & Training**Train and mentor SOC team members on threat hunting techniques and emerging threat trends.
- ** Ongoing Learning**Stay current with cybersecurity threat landscape, attacker tradecraft, and evolving threat hunting methodologies.

**Key Tasks & Duties**
- Develop and refine search queries and detection logic in monitoring platforms using intelligence-driven hypotheses.
- Identify anomalies and outliers in event data and coordinate with detection engineers to translate findings into actionable detections.
- Support incident investigation efforts through coordination with clients and content managers for deeper, on-site investigations if needed.
- Provide expert threat impact analysis based on observed adversary behaviors and campaign indicators.

**Required Skills & Qualifications**
- Strong investigative mindset with systems and design thinking capabilities.
- Excellent analytical and writing skills for clear documentation and reporting.
- Practical knowledge of threat-informed defense frameworks such as MITRE ATT&CK.
- Experience in hypothesis development and threat modeling methodologies.
- Familiarity with log analysis, endpoint telemetry, and network traffic data.

**Preferred Certifications (Nice to Have)**
- ** GIAC GREM** - Reverse Engineering Malware
- ** MAD20** - Threat Hunting Specialist

Learn more about DXC's Security team - Security

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

  • SOC L2 Analyst

    1 day ago

    Petaling Jaya, Selangor, Malaysia TechLab Security Sdn Bhd Full time 80,000 - 120,000 per year

    Key ResponsibilitiesSecurity Operations and Incident ResponseMonitor SIEM alerts and logs to identify suspicious activity and potential security incidents.Analyze incidents escalated by SOC Level 1 analysts and determine severity and next steps.Respond to security incidents, including malware infections, unauthorized access attempts, and data...

  • Cyber Security Analyst

    2 weeks ago

    Petaling Jaya, Malaysia Upscale Sdn Bhd Full time

    Key Responsibilities - Assess the security impact of security alerts and traffic anomalies to identify malicious activities and take mitigation actions or escalates up to senior members of the team as appropriate. - Leverage fundamental understanding of Operating Systems (Windows, Unix/ Linux, and OSX) in support of identifying security incidents and to have...

  • SOC Executive

    3 days ago

    Subang Jaya, Selangor, Malaysia Private Advertiser Full time 90,000 - 120,000 per year

    Assuring confidentiality, availability and integrity in service support and delivery Perform security perimeter device's change management. Support the user requirement by providing fix and appropriate recommendations. Monitor incoming event queues for potential security incidents using the RSA NetWitness/Devo SIEM tool per operation guidelines. Perform...

  • Network Security

    3 days ago

    Petaling Jaya, Malaysia Hong Leong Bank Full time

    If you are looking to excel and make a difference, take a closer look at us Role Summary: You will be a technical point of contact to manage, deploy and implement system level security with an architectural and project management view of IT Security as a whole. Your Key Responsibilities: - Plays the role of service manager for the outsourced SOC...

  • IT Security Analyst Level 3

    1 week ago

    Petaling Jaya, Malaysia Agensi Pekerjaan & Perundingcara Bright Prospect Sdn Bhd Full time

    **Job Descriptions**: - Proactively identify malicious activity through **threat hunting, network traffic analysis, and log analysis**. - Conduct in-depth malware analysis, including static and dynamic analysis, disassembling malicious code, and extracting IOCs. - Lead complex security investigations, including APTs and targeted attacks. - Analyze and...

  • Senior Endpoint Security Engineer

    3 days ago

    Petaling Jaya, Selangor, Malaysia Ensign InfoSecurity Full time 90,000 - 120,000 per year

    We are seeking an experienced Senior Endpoint Security Engineer with a strong background in managing and operating enterprise endpoint security platforms, specifically Trellix ePO / Trellix EDR or Trend Micro Endpoint Security. The ideal candidate must have 4+ years of hands-on experience in endpoint security operations, administration, and threat...

  • Security Consultant

    1 week ago

    Petaling Jaya, Malaysia Agensi Pekerjaan & Perundingcara Bright Prospect Sdn Bhd Full time

    **Job Descriptions**: - Conduct security assessments, including vulnerability assessments, penetration testing, and risk analysis. Develop security strategies aligned with business objectives. - Design secure network and cloud architectures, as well as SOC infrastructure. - Evaluate, select, and oversee the implementation of security tools and...

  • Junior Cyber Security Analyst

    24 hours ago

    Subang Jaya, Selangor, Malaysia SESM Full time 48,000 - 96,000 per year

    We Are HiringJob Title:Junior Cyber Security AnalystLocation:Ara DamansaraSalary Range:RM3,000 – RM6,000Expected work activities:1.Monitoring:Continuous monitoring of security events using a SIEM platform.Analyzing alerts to identify potential threats and false positives.2.Incident Triage and Escalation:Performing initial investigation and triage for...

  • Senior Specialist Cyber Security

    24 hours ago

    Petaling Jaya, Selangor, Malaysia HIMA Asia Pacific Full time 80,000 - 120,000 per year

    EXPECTATIONS AND TASKSRole Overview:The Cyber Security Engineer strengthens the technical backbone of the globally distributed Information Security team and its security and compliance efforts. The Cyber Security Engineer increase cyber security acting as the team's hands-on specialist for vulnerability management, penetration testing, and digital...

  • Security Analyst

    1 day ago

    Petaling Jaya, Selangor, Malaysia Private Company Full time

    Technical Leadership and Incident HandlingAct as the primary point of escalation for Level 1 analysts for complex security events and potential incidents.Perform in-depth investigation and analysis of security alerts using SIEM, EDR and other security tools.Lead the response to confirmed security incidents, including containment, eradication, and recovery...