全职 SOC Team Lead 工作, 薪水 up to MYR 10,000, TechStreet Selangor 公司招聘中 - Ricebowl

Job Description

-Oversee daily SOC operations and ensure 24/7/365 security monitoring.
-Lead security incident detection, response, containment, and remediation.
-Act as the operational bridge between Tier 1/Tier 2 analysts, senior management, and cross-functional teams.
-Ensure SOC operational readiness, SLA compliance, and adherence to security standards.
-Manage security monitoring across hybrid infrastructure.

Responsibilities

• Support internal and external security audits.
• Lead SOC operations, including alert monitoring, triage, and prioritization.
• Manage high-priority security incidents (P1/P2).
• Conduct Root Cause Analysis (RCA) and incident reporting.
• Optimize SIEM, EDR, NDR, and cloud security monitoring tools.
• Develop and improve SOC playbooks, detection rules, and SOAR automation workflows.
• Monitor SOC performance metrics (MTTD, MTTR, and SLA).
• Supervise, mentor, and evaluate Tier 1 and Tier 2 SOC Analysts.
• Manage shift schedules, handovers, and team training.
• Ensure compliance with ISO 27001, PDPA, and SOC 2.
• Conduct risk assessments and Business Impact Analysis (BIA).
• Perform threat hunting and purple teaming exercises.
• Identify security coverage gaps using the MITRE ATT&CK framework.

Requirements

• Experience
• Minimum 3 years of cybersecurity operations experience.
• At least 2 years in a senior or supervisory SOC role.
• Technical Skills
• SIEM: Splunk, Stellar Cyber, QRadar, Elastic.
• EDR: CrowdStrike, Microsoft Defender.
• Strong knowledge of network protocols, threat vectors, and attack techniques.
• Experience in Windows, Linux, and cloud log analysis.
• Hands-on experience with SOAR platforms and automation.
• Scripting knowledge: Python, PowerShell, and Bash.
• Security Frameworks
• NIST SP 800-61 (Incident Response).
• ISO/IEC 27035 (Incident Management).
• ISO 27001 and SOC 2.
• MITRE ATT&CK framework.
• Soft Skills
• Strong leadership and team management.
• Excellent crisis management and problem-solving.
• Strong verbal and written communication.
• Ability to manage stakeholder communication during security incidents.

Required Skills
-Python
-Cloud (AWS / Azure / GCP)
-Cybersecurity / InfoSec

Pay: RM1,500.00 - RM10,000.00 per month

Benefits:

• Professional development

Work Location: In person