Cybersecurity Consultant (SOC)

Pentech Solution Sdn Bhd; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Pentech Solution Sdn Bhd in Malaysia is seeking an experienced Cybersecurity Consultant (SOC) to bridge MSSP operations and client portfolios, leading high-severity incident responses and SOC quality. You will deploy and tune SIEM platforms, translate technical findings into executive risk insights, and regularly brief clients' CISOs and IT leads.

This role requires 7+ years in cybersecurity with 3+ years in client-facing MSSP or advisory, plus strong communication and leadership for crisis

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, IT, or equivalent.
• 7+ years in Cybersecurity with 3+ years in client-facing MSSP or advisory.
• Experience as a Senior/L3 IR Specialist or Senior SOC Lead.

Responsibilities

• Serve as primary client-facing technical lead for SOC, incident response, and security operations.
• Lead regular operational syncs, briefings, and executive security reviews with client stakeholders.
• Translate complex security findings into actionable business risk insights and executive reports.
• Manage client expectations, escalations, and satisfaction per contract and security best practices.
• Deploy, configure, manage, and optimize SIEM across client environments.
• Design and implement log ingestion pipelines, correlation rules, and threat detection use cases.
• Lead incident response efforts with real-time client communication.

Skills

Incident response

SOC leadership

SIEM deployment

Executive communication

Cloud security

Education

Bachelor's degree in Computer Science, Cybersecurity, IT, or equivalent

Tools

MITRE ATT&CK

AWS

Azure

GCP

SIEM platforms

Job description

Pentech is seeking an experienced, highly technical, and client-focused Cybersecurity Consultant (SOC) to serve as the primary bridge between our Managed Security Services Provider (MSSP) operations and our valued client portfolio. In this pivotal role, you will act as the principal client contact, lead high-severity incident responses, oversee SOC operational quality, and drive strategic security improvements across client environments.

The ideal candidate possesses deep technical expertise in security operations—specifically including hands‑on deployment and management of SIEM platforms—alongside exceptional executive communication, consulting, and client engagement capabilities. You will work standard office hours while providing standby availability for off‑hours critical client escalations.

Key Responsibilities

1. Client Engagement & Advisory (Primary Contact)

• Serve as the primary client‑facing technical lead and trusted advisor for all SOC, incident response, and security operations matters across assigned accounts.
• Lead regular operational syncs, technical briefings, and executive security reviews with client stakeholders (CISOs, IT Directors, and Security Leads).
• Translate complex technical security findings into actionable business risk insights and executive summary reports.
• Manage client expectations, escalations, and satisfaction, ensuring service alignment with contractual obligations and security best practices.

2. Reporting & Performance Visibility

• Prepare, review, and deliver comprehensive weekly and monthly security reports for both internal Pentech management and client leadership.
• Analyze threat trends, incident metrics, SLA performance (MTTD/MTTR), and security posture health to highlight key accomplishments and areas of exposure.
• Deliver quarterly security review presentations detailing threat landscapes, emerging risk vectors, and recommended security roadmap enhancements.

3. Advanced Technical Lead & L3 Escalation Support

• Act as the Tier 3 (L3) technical escalation point for the SOC team during complex, high‑severity, or evasive security incidents.
• Oversee technical investigations performed by SOC analysts to ensure investigation depth, root‑cause accuracy, and adherence to containment playbooks.
• Perform deep‑drive incident triage, digital forensics analysis, and attack path mapping during major security breaches.
• Lead critical incident response efforts, coordinating backend technical resources and maintaining real‑time communication with client leadership throughout the incident lifecycle.

4. Platform Management & Security Engineering (SIEM)

• Deploy, configure, manage, and optimize SIEM platform modules across client environments.
• Design and implement custom log ingestion pipelines, correlation rules, EDR/XDR policies, and threat detection use cases tailored to client‑specific architectures.
• Ensure optimal health, coverage, and performance of SIEM platform deployments, troubleshooting agent deployment issues and log parsing errors.

5. Security Hardening & Posture Optimization

• Proactively evaluate client network, endpoint, cloud, and identity architectures to identify security gaps and vulnerabilities.
• Propose, design, and guide the implementation of tailored security hardening recommendations (e.g., identity security policies, attack surface reduction, EDR prevention policies, network segmentation).
• Collaborate with internal Pentech Security Engineers and client IT teams to drive continuous hardening and posture improvement initiatives.

Working Schedule & On-Call Requirements

• Primary Schedule: Standard Office Hours (Monday to Friday).
• Standby / On-Call Expectation: Required to be on standby outside regular office hours (nights, weekends, and public holidays) for critical client engagements and high‑severity (Severity 1 & 2) security incident escalations.

Key Performance Indicators (KPIs)

• Client CSAT & Retention: Maintain a client CSAT rating of ≥ 92% across assigned client accounts.
• Reporting Timeliness & Quality: 98% on‑time delivery of weekly operational reports and monthly executive security reports.
• Critical Incident SLA Management: Ensure 98% compliance with critical incident escalation and initial client briefing SLAs (≤ 15–30 minutes from L3 escalation).
• Platform Optimization (SIEM): Achieve ≥ 95% log ingestion health and agent coverage across managed SIEM client environments.
• Security Hardening Delivery: Propose at least 2 structured security hardening or posture improvement initiatives per client per quarter.

Skills and Experience We Are Looking For

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent practical experience.
• 7+ years of progressive experience in Cybersecurity, with at least 3+ years in a client‑facing consulting or technical lead role within an MSSP or security advisory firm.
• Proven track record operating as a Senior/L3 Incident Response Specialist or Senior SOC Lead.

Technical Mastery:

• Direct hands‑on experience deploying, managing, and tuning SIEM Platforms.
• Deep, practical understanding of attack frameworks (MITRE ATT&CK), threat actor TTPs, network protocols, operating system internals (Windows, Linux, macOS), and cloud security architectures (AWS, Azure, GCP).
• Demonstrated capability in root cause analysis, malware triage, and threat hunting methodologies.
• Exceptional written and verbal communication skills, with proven ability to present complex technical findings to C‑level executives.
• Strong leadership and oversight capabilities to guide and review technical work performed by SOC teams.
• A calm, structured demeanor during critical crisis management and breach handling scenarios.

Advantage (Preferred Qualifications)

• Active professional cybersecurity certifications: CISSP, CISM, GCIH, GCFA, GNFA, OSCP, or equivalent.
• Experience implementing and auditing regulatory compliance frameworks (ISO 27001, SOC 2, PCI‑DSS, NIST CSF).
• Hands‑on experience with SOAR platform automation and Python/PowerShell scripting for security integrations.