Manager - SOC

Recooty; Kuala Lumpur; On-site; MYR 200,000 - 250,000; Full time

Job summary

An established industry player is seeking a Security Operations Center Manager to lead and enhance their SOC team. This role involves building competencies among SOC Analysts and Engineers, managing a 24x7 operation, and ensuring effective incident response. The ideal candidate will possess deep knowledge of security concepts and extensive experience in Information Security. This dynamic position offers an attractive salary and benefits, including performance-related bonuses and comprehensive medical coverage. Join a forward-thinking company where your expertise will significantly impact security operations and team performance.

Benefits

Attractive Salary

Performance Related Bonus

15 Days Annual Leave

14 Days Medical Leave

Medical and Hospitalization Coverage

Qualifications

• Minimum 8 years in IT with a focus on Information Security.
• At least 3 years of experience in a Security Operations Center (SOC).
• Strong background in Cyber Security and related fields.

Responsibilities

• Manage a 24x7 Security Operation Center and oversee SOC activities.
• Develop and improve SOC processes, ensuring effective operations.
• Analyze and respond to security threats from various data sources.

Skills

Incident Response

Log Analysis

TCP/IP

Network Traffic Analysis

Anti-virus/Malware

Intrusion Detection/Prevention

Packet Analysis Techniques

Event Correlation

Event Triage

Education

Degree in Computer Science

Post Graduate Diploma in Computer Science

MSc in Computer Science

Tools

Security Information Event Management (SIEM)

Firewall (FW)

Intrusion Detection Systems (IDS)

Intrusion Prevention Systems (IPS)

Antivirus (AV)

Endpoint Detection and Response (EDR)

Job description

Responsibilities of the Role:

• Build, develop and design required competencies and skills of training members: SOC Analysts / Engineers, Operators and Technicians.
• Manage 24x7 Security Operation Center.
• Administer, develop, improve and own SOC processes and procedures, ensuring effective operations.
• Coordinate with stakeholders and other delivery practices to address, follow up and resolve security issues as part of the escalation matrix and customer delivery process.
• Work with various delivery teams to ensure toolsets used to detect infrastructure security events are deployed on all necessary platforms.
• Develop and plan out the necessary technology asset roadmap and direction for the SOC.
• Constantly review existing methods and approaches, addressing any communication or process gaps.
• Oversee SOC activities and provide performance reviews to the SOC team.
• Deep knowledge of security concepts like cyber-attacks and techniques, threat vectors, risk management, incident management etc.
• Analyze and proactively respond to security threats from Firewall (FW), Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Antivirus (AV), Endpoint Detection and Response (EDR) and other security threat data sources.
• Prepare training programme for Security Analyst and conduct knowledge sharing sessions for Security Analyst.
• Efficient team incident response capabilities and leadership.

Requirements for the Role:

• A degree, post graduate diploma or MSc in computer science from a recognized university/institute.
• Knowledge of the following technical SOC skills: incident response, log analysis, TCP/IP, network traffic analysis, anti-virus/malware, intrusion detection/prevention, packet analysis techniques, event correlation and event triage.
• Background in Cyber Security, Computer Sciences, Engineering, Information Technology.
• Minimum 8 years’ experience working in an IT environment with focus on Information Security.
• At least 3 years of directly related practical experience and demonstrated ability to carry out the functions of the job in SOC.
• Extensive experience in addressing security policy, compliance, privacy and regulatory issues.
• Certifications and experience of Security Information Event Management (SIEM).
• Other certifications such as CISA, CISM, CRISC, GCIH, CISSP are an added advantage.

The Package:

• Attractive Salary (RM10,000).
• Performance related bonus for confirmed staff.
• Annual Leave 15 days.
• Medical Leave 14 days.
• Medical and hospitalization coverage.
• Working Location: Kuala Lumpur.