Head of 24/7 SOC & Incident Response (Microsoft Sentinel)

Private Advertiser; Kuala Lumpur; On-site; MYR 240,000 - 360,000; Full time

Job summary

The Private Advertiser in Kuala Lumpur is seeking an experienced SOC Manager to lead a 24/7 Security Operations Centre. You will drive shift planning, team leadership, and the end-to-end incident response while tuning Microsoft Sentinel for optimal detection and response.

Reporting to Security Operations, you will supervise multi-tier analysts, conduct Level 2 root-cause analysis, and coordinate ITSM alignment to maintain SLAs.

Qualifications

• 8+ years in cybersecurity or security operations.
• 2–3+ years in a SOC leadership role managing 24/7 teams.
• Hands-on with Microsoft Sentinel analytics, workbooks and playbooks.
• Strong ITSM process and ticket lifecycle knowledge.
• Experience reviewing security posture across architecture, network and infrastructure.

Responsibilities

• Manage and lead the 24/7 Security Operations Centre, including planning, scheduling and rosters.
• Oversee the operation and tuning of Microsoft Sentinel (analytics rules, workbooks, automation).
• Drive end-to-end incident management (triage, investigation, escalation, containment and post-incident review).
• Ensure integration between SOC workflows and ITSM processes (tickets, SLA tracking).
• Perform Level 2 investigations and root cause analysis for complex incidents.
• Review security posture across architecture, network and infrastructure domains.
• Recruit, coach and mentor SOC analysts across tiers; conduct performance reviews.
• Develop and maintain SOC runbooks, playbooks and procedures.
• Report SOC performance, incident trends and KPIs/SLAs to stakeholders.

Skills

Leadership

Incident response

Team coaching

ITSM knowledge

Tools

Microsoft Sentinel

Logic Apps

Job description

The Private Advertiser in Kuala Lumpur is seeking an experienced SOC Manager to lead a 24/7 Security Operations Centre. You will drive shift planning, team leadership, and the end-to-end incident response while tuning Microsoft Sentinel for optimal detection and response.

Reporting to Security Operations, you will supervise multi-tier analysts, conduct Level 2 root-cause analysis, and coordinate ITSM alignment to maintain SLAs.