SOC Manager | Security Operations Center Manager

SOC Manager (Security Operations Center Manager) - SOC • Working location : Kota Damansara • Job type : Permanent • Salary : Max RM20,000 • Benefits : 5-day week, Life Insurance, performance bonus, Overseas Company Trip, etc • Industry : IT Hardware & Software Job Overview: A SOC Manager in a Managed Service Provider (MSP) model is responsible for leading the Security Operations Center (SOC) team to deliver cybersecurity monitoring, threat detection, and incident response services to multiple clients. This role ensures that the SOC operates efficiently, implements security best practices, and meets Service Level Agreements (SLAs). The SOC Manager works closely with clients, internal teams, and third-party vendors to enhance cybersecurity posture while managing SOC operations and technologies. Key Responsibilities: 1. SOC Operations & Service Delivery - Oversee 24/7 SOC operations, ensuring threat monitoring, detection, and response for multiple clients. - Maintain and optimize SIEM, EDR/XDR solutions, and threat intelligence platforms. - Develop and enforce security playbooks, procedures, and escalation workflows for incident handling. - Ensure timely response to security incidents in alignment with SLAs and compliance requirements. 2. Threat Detection, Incident Response & Forensics - Lead proactive threat hunting and cyber intelligence gathering for emerging threats. - Oversee incident response, containment, and recovery processes for client security incidents. - Conduct root cause analysis and work with clients on post-incident remediation. - Collaborate with Red and Blue teams to conduct penetration testing and security exercises. 3. Client Engagement & Compliance Management - Serve as the primary security contact for clients, providing security insights, reports, and recommendations. - Ensure SOC services align with industry standards - Conduct security assessments, risk evaluations, and compliance audits for clients. - Provide security advisory and consulting to clients for security improvements. 4. Team Leadership & Development - Manage a team of SOC Analysts (L1, L2,L3), Threat Hunters, and Incident Responders. - Recruit, train, and mentor analysts to improve technical capabilities and certification achievements. - Implement a performance-driven culture with KPIs for SOC effectiveness and individual analyst performance. 5. Security Tooling & Automation - Identify and implement security automation solutions to improve SOC efficiency (SOAR, AI-driven analytics). - Optimize log management, threat intelligence feeds, and endpoint protection across client environments. - Evaluate and integrate new security tools to enhance MDR (Managed Detection & Response) and SOC capabilities. Job Requirements: • Bachelor’s or Master’s in Cybersecurity, Information Security, Computer Science, or a related field. • Industry certifications are a plus: CISSP, CISM, CCSP (Security leadership), GIAC (GCIA, GCIH, GMON) (Incident response & threat hunting), CEH, OSCP, or eJPT (Penetration testing & red teaming) • 5+ years in Cybersecurity/SOC operations, with at least 2+ years in a leadership role in an MSP environment. • Strong experience with SIEM, EDR, XDR, and SOAR solutions. • Familiarity with cloud security (AWS, Azure, GCP) and hybrid infrastructure security models. • Hands-on experience in incident handling, threat intelligence, malware analysis, and forensic investigations. • Proficiency in SIEM platforms (Splunk, QRadar, Sentinel, etc.). • Knowledge of firewalls, IDS/IPS, endpoint security, and threat intelligence frameworks. • Strong understanding of MITRE ATT&CK, Cyber Kill Chain, and NIST CSF. • Scripting experience in Python, PowerShell, or Bash (preferred for automation). • Strong leadership and mentoring abilities. • Excellent client communication and stakeholder management. • Ability to balance multiple priorities in a fast-paced MSP environment. If you are interested to consider this job opportunity, please send us your CV to [email protected] or WhatsApp 011-5434 1797