Job Description
-Oversee daily SOC operations and ensure 24/7/365 security monitoring.
-Lead security incident detection, response, containment, and remediation.
-Act as the operational bridge between Tier 1/Tier 2 analysts, senior management, and cross-functional teams.
-Ensure SOC operational readiness, SLA compliance, and adherence to security standards.
-Manage security monitoring across hybrid infrastructure.
Responsibilities
- Support internal and external security audits.
- Lead SOC operations, including alert monitoring, triage, and prioritization.
- Manage high-priority security incidents (P1/P2).
- Conduct Root Cause Analysis (RCA) and incident reporting.
- Optimize SIEM, EDR, NDR, and cloud security monitoring tools.
- Develop and improve SOC playbooks, detection rules, and SOAR automation workflows.
- Monitor SOC performance metrics (MTTD, MTTR, and SLA).
- Supervise, mentor, and evaluate Tier 1 and Tier 2 SOC Analysts.
- Manage shift schedules, handovers, and team training.
- Ensure compliance with ISO 27001, PDPA, and SOC 2.
- Conduct risk assessments and Business Impact Analysis (BIA).
- Perform threat hunting and purple teaming exercises.
- Identify security coverage gaps using the MITRE ATT&CK framework.
Requirements
- Experience
- Minimum 3 years of cybersecurity operations experience.
- At least 2 years in a senior or supervisory SOC role.
- Technical Skills
- SIEM: Splunk, Stellar Cyber, QRadar, Elastic.
- EDR: CrowdStrike, Microsoft Defender.
- Strong knowledge of network protocols, threat vectors, and attack techniques.
- Experience in Windows, Linux, and cloud log analysis.
- Hands-on experience with SOAR platforms and automation.
- Scripting knowledge: Python, PowerShell, and Bash.
- Security Frameworks
- NIST SP 800-61 (Incident Response).
- ISO/IEC 27035 (Incident Management).
- ISO 27001 and SOC 2.
- MITRE ATT&CK framework.
- Soft Skills
- Strong leadership and team management.
- Excellent crisis management and problem-solving.
- Strong verbal and written communication.
- Ability to manage stakeholder communication during security incidents.
Required Skills
-Python
-Cloud (AWS / Azure / GCP)
-Cybersecurity / InfoSec
Pay: RM1,500.00 - RM10,000.00 per month
Benefits:
Work Location: In person