初级事件响应员，马来西亚
Junior Incident Responder, Malaysia
Blackpanda 是亚洲领先的网络事件响应公司，通过三个整合渠道提供数字紧急响应服务：事件响应咨询、IR-1 保障订阅服务以及由伦敦劳埃德保险市场承保的网络安全保险。每个渠道都专为不同类型的客户量身打造，无论是企业客户、大众市场还是复杂的风险转移客户，每个渠道都能独立提供完整的事件响应服务。这三种渠道共同覆盖整个商业市场，因为我们的使命是为每个人提供数字紧急响应服务。购买全部三项服务后，它们将组合成完整的攻击后恢复解决方案：提前准备、在被攻击时立即响应，并通过保险进行财务恢复。一个本地团队帮助您做好准备、响应并恢复。
我们如何工作
Blackpanda 是一家技术驱动的服务团队。我们大力投资于人工智能，并不断努力做得更好、更快、规模更大。您将被赋予使用团队批准工具的自由，但您需要对结果负责。我们更看重聪明的工作而非辛苦的工作，欢迎来自任何地方的好点子，并有意避免官僚主义阻碍创新。如果您想加入一个在亚洲打造最佳响应实践的团队，并塑造推动我们前进的工具和方法，您将与优秀的同事同行。
关于职级说明
此职位描述仅反映了一个职位名称；然而，我们根据此简介招聘多个职级的员工。最终的职位名称（无论是 DFIR 分析师、DFIR 专家，还是相近职级）将根据面试过程中展示的网络安全和事件响应能力的深度和广度来确定。如果您经验接近这些职级的边界，我们鼓励您申请。
您的使命：初级事件响应人员
作为初级事件响应人员，您将与高级响应人员一起处理现场任务——帮助客户遏制、调查并从真实的网络攻击中恢复。这是一个以交付为导向的职位：您的工作是完成任务，学习技能，并在直接指导下成长为一名成熟的响应人员。
我们看重态度和能力。我们不要求您已经见过一切——我们期望您充满好奇心、易于指导，并认真对待在事件响应领域建立职业生涯。合适的候选人可以通过他们的经验、副项目、学习或社区参与展现出对 IR 的真实兴趣，并准备好学习。
查看英文原文
About Blackpanda
Blackpanda is Asia's leading cyber incident response company, delivering digital emergency response across three integrated channels: IR consulting, IR-1 assurance subscriptions, and Lloyd's of London-underwritten cyber insurance. Each is purpose-built for a different buyer, whether enterprise, mass market, or sophisticated risk-transfer clients, and each stands alone as full incident response. Together, these channels reach the entire commercial market, because our mission is to provide digital emergency response for everyone. Buy all three and they combine into the complete post-attack recovery solution: preparation in advance, response the moment you're hit, and financial recovery paid for by insurance. One local team to help you get ready, respond, and recover.
How We Work
Blackpanda is a tech-enabled services team. We invest heavily in AI and are constantly pushing to do better, faster, and at scale. You are given freedom to use the approved tools in the team, but you are to take ownership of outcomes. We prefer smart work over hard work, welcome good ideas regardless of where they come from, and have deliberately kept red tape out of the way of innovation. If you want to join a team building the best response practice in Asia — and shaping the tools and methods that get us there — you'll be in good company.
A note on levelling
This posting reflects a single role title; however, we hire across a range of seniority levels from this brief. The final title, whether DFIR Analyst, DFIR Specialist, or an adjacent level, will be determined by the depth and breadth of cybersecurity and incident response capabilities demonstrated throughout the interview process. If your experience sits near the edge of these levels, we encourage you to apply regardless.
Your Mission: Junior Incident Responder
As a Junior Incident Responder, you will work alongside senior responders on live engagements — helping clients contain, investigate, and recover from real cyber attacks. This is a delivery-focused role: your job is to do the work, learn the craft, and grow into a fully fledged responder under direct mentorship.
We hire for attitude and aptitude. We don't expect you to have seen everything yet — we expect you to be curious, coachable, and serious about building a career in incident response. The right candidate can demonstrate a genuine interest in IR through their experience, side projects, study, or community involvement, and shows up ready to learn fast in a real-world environment.
Core Responsibilities
Delivery Alongside Senior Responders
- Support senior consultants on active incidents — assisting with containment, evidence collection, forensic analysis, and reporting.
- Acquire and triage forensic artifacts across Windows, Linux, macOS, and cloud environments under the guidance of more experienced team members.
- Analyse logs, endpoint telemetry, network data, and malware artifacts, and contribute findings to investigation timelines.
- Use scripting (Python, Bash, or PowerShell) to assist with collection, parsing, and automation tasks where useful.
Client-Ready Professionalism
- Document findings clearly and accurately, contributing sections to client deliverables under senior review.
- Maintain a calm, professional posture in client-facing settings — even when the situation around you is anything but calm.
- Follow operational procedures, chain-of-custody requirements, and quality standards as taught and reinforced through mentorship.
Learning and Growth
- Take ownership of your own development — ask questions, study actively, and apply feedback quickly.
- Participate in instructor-led training, internal exercises, and on-the-job mentoring designed to accelerate your tradecraft.
- Contribute observations, ideas, and improvements back to the team — innovation is welcomed regardless of seniority.
Minimum Requirements
- 1+ year of experience in cybersecurity, IT, or an adjacent technical field (e.g. SOC analysis, sysadmin, helpdesk, network engineering, software engineering).
- Demonstrable, genuine interest in incident response — through study, side projects, CTFs, home labs, community involvement, or prior work.
- Working comfort with at least one of Windows, Linux, or macOS, and a willingness to become competent across all three.
- Basic scripting ability in Python, Bash, or PowerShell — enough to read and adapt scripts, with the appetite to grow further.
- Clear written and verbal English; able to take notes, write up findings, and communicate professionally with teammates and clients.
- Coachable, curious, and resilient — willing to be wrong, learn fast, and try again.
- Calm under pressure, with a professional posture in client-facing settings.
Preferred Qualifications
- Started or completed a relevant certification (e.g. Security+, Network+, GCIH, GCFA, GFACT, CEH, BTL1) — in progress is just as welcome as completed.
- Hands-on exposure to EDR, SIEM, or forensic tooling, even in a learning context.
- Participation in CTFs, security communities, open-source projects, or personal labs.
- Background in an adjacent field — IT operations, SOC, sysadmin, network engineering, software engineering, intelligence analysis — and a clear desire to move into IR.
- Additional languages relevant to the regions Blackpanda serves.
How You'll Grow
You will be paired with senior responders on real engagements from day one. Your development will be supported through direct, hands-on mentorship and a structured instructor-led training program — not a sink-or-swim environment.
You'll join a diverse team of teammates from around the world, where who you are, the quality of your work, and your character are what matter. Trying and failing is ok. Failing to try is not.
Why This Role
If you're early in your career, hungry to learn, and want to spend the next phase of it doing real incident response under people who will invest in your growth — this is the seat for you. We're not looking for a finished product. We're looking for the right attitude, the right aptitude, and the willingness to put in the work.
Originally posted on Himalayas