Global SOC Lead: Incident Response & Detection

Altera; Bayan Lepas; On-site; MYR 180,000 - 280,000; Full time

Job summary

Altera in Penang is seeking a senior Security Operations Center (SOC) Lead to oversee global SOC functions and incident response. You will drive incident management, develop playbooks, and coordinate with MSPs and internal teams to ensure timely remediation.

The role requires 5+ years in security operations, strong SIEM/SOAR/EDR/XDR experience, and hands-on leadership. You’ll align with MITRE ATT&CK and NIST CSF while delivering measurable security outcomes.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Information Security, or related field.
• 5+ years of progressive cybersecurity experience in security operations, incident response, threat detection, or SOC leadership.
• 3+ years leading SOC analysts, incident response teams, or cross-functional cyber defense workflows.
• Strong working knowledge of SIEM, SOAR, EDR/XDR, cloud security monitoring, identity security, email security, network security, and incident response processes.
• Demonstrated experience building or improving detection use cases, alert triage workflows, response playbooks, escalation procedures, and SOC metrics.
• Experience coordinating investigations involving phishing, malware, endpoint compromise, suspicious authentication, privileged access misuse, data exposure, and cloud security events.
• Familiarity with MITRE ATT&CK, NIST CSF, NIST SP 800-61, ISO 27001, CIS Controls, or equivalent cyber defense frameworks.
• Ability to communicate clearly with technical teams, business stakeholders, senior leadership, and external partners during security incidents.
• Strong analytical, documentation, prioritization, and decision-making skills in high-pressure operational environments.
• CISSP, Security+, or equivalent industry certification.

Responsibilities

• Lead daily SOC operations across monitoring, triage, investigation, escalation, and handoffs across global time zones.
• Own and mature SOC procedures including incident intake, severity classification, escalation paths, playbooks, and post-incident reviews.
• Manage and improve security monitoring across SIEM, SOAR, EDR/XDR, email, cloud, identity, and threat intelligence.
• Build and tune detection use cases aligned to MITRE ATT&CK techniques, threat intelligence, audit findings, and business assets.
• Lead incident response coordination for endpoint compromise, phishing, malware, data loss indicators, and cloud misconfigurations.
• Establish SOC metrics and reporting including MTTD, MTTA, MTTC, and incident trends.
• Coordinate with MSPs, IT teams, and stakeholders for remediation ownership.
• Drive continuous improvement via tabletop exercises and purple-team findings.

Skills

Security operations

Incident response

SOC leadership

Threat detection

SIEM/SOAR/EDR/XDR

Communication with stakeholders

Governance/compliance

Education

Bachelor’s degree in Computer Science / related field

CISSP or equivalent

Tools

Microsoft Sentinel

Microsoft Defender XDR

KQLs

Job description

Altera in Penang is seeking a senior Security Operations Center (SOC) Lead to oversee global SOC functions and incident response. You will drive incident management, develop playbooks, and coordinate with MSPs and internal teams to ensure timely remediation.

The role requires 5+ years in security operations, strong SIEM/SOAR/EDR/XDR experience, and hands-on leadership. You’ll align with MITRE ATT&CK and NIST CSF while delivering measurable security outcomes.