Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 5 hours ago

Cybersecurity Lead

NEXT Ventures46 open roles

Where
Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur, Malaysia
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowCybersecurity LeadNEXT Ventures · Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur, Malaysia

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on NEXT Ventures's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.4% of postings close within 7 days. Measured by our own scanner across the market. NEXT Ventures postings stay open a median of 5 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.6%3 days
  3. 13.4%7 days
  4. 21.6%14 days
  5. 36.2%30 days
  6. 59.0%60 days
This job: posted 5 hours ago

NEXT Ventures median: 5 days open

The posting

Who We Are

NEXT Ventures is a global fintech group operating FundedNext (prop trading) and FNmarkets (CFD brokerage), with teams across Malaysia, Bangladesh, Sri Lanka, Cyprus, and Dubai. We build trading products that traders rely on every day, and security is central to keeping that trust.

Your Role in Our Mission

As Cybersecurity Lead, you are our senior technical authority for threat detection, incident response, and risk reduction. You lead the security analysis team, guide it through high-severity incidents, and work with Engineering, DevOps, IT, Compliance, and leadership so that our controls support business resilience.

How You’ll Make an Impact

Security Operations & Incident Response

  • Lead analysis and response for high-severity incidents: account and endpoint compromise, cloud events, data exposure, and application-layer attacks.
  • Define and improve investigation methodologies, IR workflows, and evidence-handling practices.
  • Lead root cause analysis for major and recurring incidents, with preventive actions clearly owned and tracked.
  • Act as the senior escalation point for analysts, engineers, IT, and DevOps.

Detection & Threat Hunting

  • Drive detection engineering: close coverage gaps, tune rules, define use cases, and improve telemetry quality.
  • Run hypothesis-driven threat hunts based on attacker TTPs, threat intelligence, and our specific exposure.

Risk & Compliance

  • Prioritize vulnerabilities by exploitability, asset criticality, business impact, exposure, and compensating controls, not CVSS alone.
  • Map security practices to relevant frameworks and provide technical evidence for audit readiness.
  • Report trends, incident metrics, and control gaps to leadership in clear business language.

Team Leadership

  • Run day-to-day security analysis operations: monitoring, triage, investigation, escalation, and reporting.
  • Manage workload, priorities, and investigation queues; direct analysts during active incidents and high-volume periods.
  • Review investigation quality, documentation, RCA outputs, and stakeholder updates.
  • Coach and upskill analysts through case reviews, feedback, and structured learning plans.
  • Track SOC metrics: alert volume, triage quality, escalation timelines, and vulnerability follow-up.

Process, Tooling & Roadmap

  • Build and maintain playbooks, escalation models, and investigation standards.
  • Evaluate tools and automation for enrichment, triage, reporting, and response.
  • Partner with Engineering, DevOps, IT, and Product to embed security learnings into design and remediation.
  • Identify maturity gaps and recommend roadmap priorities for the security function.

What You Bring

Experience

  • 7+ years in cybersecurity, including experience leading or mentoring analysts and handling high-severity incidents.

Technical skills

  • Advanced analysis of attacks across identity, endpoint, network, cloud, and application layers.
  • Hands-on incident response, including containment and remediation planning.
  • Detection strategy and engineering: use-case definition, telemetry improvement, false-positive reduction.
  • Hypothesis-driven threat hunting aligned to MITRE ATT&CK.
  • Working knowledge of digital forensics: artifacts, evidence preservation, timeline analysis, compromise assessment.
  • Cloud and identity security: IAM risks, MFA, privileged access, suspicious authentication patterns.
  • Automation of enrichment, triage, reporting, and response workflows.

Frameworks

  • Strong working knowledge: MITRE ATT&CK, NIST CSF, CIS Controls, Incident Response Lifecycle.
  • Working knowledge: ISO 27001, OWASP Top 10, PCI DSS / GDPR (where applicable).

Leadership

  • Sets clear priorities and quality standards; guides teams under pressure.
  • Builds trust with IT, Engineering, DevOps, Compliance, and business teams.
  • Translates technical risk into executive-ready insights.

X-Factor

  • Industry certifications (e.g., CISSP, GCIH, GCFA, OSCP, CISM, or cloud security certifications) [confirm list].
  • Experience in fintech, trading, or other regulated, high-availability environments.
  • A record of building detection or automation capabilities that measurably cut response time.
  • A culture-builder mindset: ownership, analytical discipline, and continuous learning.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against NEXT Ventures's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on NEXT Ventures's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    NEXT Ventures's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.