Cybersecurity Incident Response Specialist

Smart Axiata is Cambodia’s leading mobile telecommunications provider, proudly connecting over 8 million customers across the country. As a member of the Axiata Group—one of Asia’s largest and most respected telecom groups—we’re more than just a tech company. We are a people-driven, purpose-led organization committed to shaping the digital future of Cambodia.

At Smart, we believe our people are our greatest strength. We foster a culture of innovation, agility, and continuous learning, empowering individuals to grow, lead, and make meaningful impact. From launching cutting-edge technologies like 5G to driving digital inclusion and sustainability, working at Smart means being part of something bigger.

Join us to thrive in a dynamic environment where your ideas matter, your growth is supported, and your work helps build a smarter, more connected Cambodia

Cybersecurity Incident Response Specialist plays a critical role in proactively responsible for detecting, analyzing, and responding to cybersecurity incidents using a variety of tools and techniques. This position is ideal for individuals with strong technical and cybersecurity backgrounds who are eager to develop hands-on experience in incident response, threat analysis and digital forensics. The candidate will be part of a dynamic team responsible for protecting the organization’s digital assets and ensuring rapid response to security threats.

• Monitor security alerts and events from SIEM, IDS/IPS, EDR, Firewall, WAF and other security tools.
• Investigate and respond to security incidents, including malware infections, phishing attacks, unauthorized access and data breaches.
• Perform root cause analysis and recommend remediation strategies.
• Assist in the containment, eradication and recovery of cybersecurity incidents under the guidance of Cyber Incident Procedure.
• Analyzing threat intelligence feeds and correlates with internal data to identify potential threats.
• Stay updated on emerging threats, vulnerabilities, and attack vectors.
• Conduct digital forensics investigations on compromised systems.
• Preserve and document evidence for potential legal or compliance purposes.
• Work closely with GSOC, IT, Regulatory, Risk & Compliance, Data Privacy and other stakeholders during incident response.
• Create detailed incident reports and post-incident reviews.
• Contribute to the development and improvement of incident response playbooks.
• Perform ad-hoc work from time to time as required by management.

• Bachelor’s degree in computer science, Information Security, Cybersecurity or related field.
• 2–3 years of hands-on experience in cybersecurity operations with a focus on incident detection, analysis, and response
• Strong understanding of network protocols, operating systems, and security technologies.
• Experience with SIEM platforms (Splunk, QRadar, Sentinel), EDR tools and forensic software.
• Familiarity with MITRE ATT&CK framework and threat hunting methodologies.
• Relevant certifications such as GCIH, GCFA, CEH, or CISSP are a plus.
• Well understanding of Cloud security principle (AWS, Azure, GCP)
• Well scripting knowledge (Python, PowerShell, Bash)
• Well experience with log analysis and package capture tools (Wireshark, tcpdump)
• Proven experience working with SIEM platforms, EDR tools and conducting forensic investigations.
• Exposure to threat intelligence, vulnerability management and incident handling procedures.
• Experience participating in or leading incident response activities, including containment, eradication, and recovery.

Thank you for your interest in joining Smart Axiata! To apply, please fill out the application form and upload your CV in DOC, DOCX, or PDF format (up to 3MB).

Kindly note that only shortlisted candidates will be contacted. We appreciate your time and effort in applying and look forward to reviewing your application.

For any inquiries, feel free to reach out to us at [email protected].