Digital Forensic Incident Response (DFIR) L3

About Us

Tentacle Tech is an IT and software development consulting company serving major enterprises in Malaysia. We provide technology consulting, software development, and IT services across multiple industries.

The Role

We are seeking an experienced Digital Forensic Incident Response (DFIR) L3 to support a high-performing cybersecurity team within the financial services sector.

This role has a strong focus on honeypot infrastructure, threat detection, threat hunting, and advanced incident investigation. You will help strengthen proactive detection capabilities across SIEM, EDR, threat-analysis environments, and security operations.

What You’ll Do

• Develop, maintain, and support honeypots, honeynets, and related infrastructure
• Act as a subject matter expert for honeypot and threat-analysis environments
• Develop and maintain threat-analysis labs, virtual machines, and cyber ranges
• Build and fine-tune SIEM queries, dashboards, alerts, and detection rules
• Conduct proactive threat hunting and compromise assessments across systems and networks
• Investigate security alerts using SIEM, EDR, logs, artefacts, and Indicators of Compromise (IOCs)
• Analyse malicious binaries, scripts, web scripts, and malspam emails
• Identify attacker behaviour and translate findings into improved threat-detection use cases
• Develop scripts, automation, and internal security tools to support threat intelligence and incident response
• Evaluate and fine-tune EDR and other detective security solutions
• Maintain and clean IOC datasets to improve detection quality
• Document investigation findings, remediation actions, and security-control gaps

What We’re Looking For

• Bachelor’s degree in Computer Science, Security, Network, Computer Systems, or a related discipline
• Minimum 5 years of IT Security experience, preferably within Financial Services
• Strong experience in threat detection, threat hunting, SIEM, and EDR
• Hands-on exposure to honeypots, honeynets, deception technologies, cyber ranges, or threat-analysis labs is highly preferred
• Experience with malware, binary, script, log, and malicious-email analysis
• DFIR or incident-response experience is advantageous
• Relevant certifications such as SANS GCIH, SANS GREM, CEH, or CompTIA CySA+ are a plus
• Strong analytical, investigative, and problem-solving skills
• Ability to work independently and collaborate with SOC, threat intelligence, and security engineering teams

Key Responsibilities

• Honeypot and honeynet infrastructure
• Threat detection and threat hunting
• SIEM and EDR tuning
• Malware and artefact analysis
• Compromise assessments
• Cyber range and threat-lab maintenance
• IOC investigation and detection improvement

Job Summary

We’re looking for an experienced Digital Forensic Incident Response (DFIR) L3 with strong exposure to honeypot environments, threat detection, threat hunting, malware analysis, SIEM, and EDR. The role supports a major financial services environment in Malaysia and focuses on strengthening proactive threat detection and incident-response capabilities.