Manager XDR Sr. Specialist

Telekom Malaysia; Kuala Lumpur; Sur place; MYR 180 000 - 240 000; Plein temps

Résumé du poste

Telekom Malaysia seeks a senior security operations leader to drive the Cortex XDR program. You will provide technical leadership, optimize the platform, and oversee analysts.

The role blends hands-on incident response with detection engineering, security policy, and strengthening organizational security posture. You will partner with SOC leadership on roadmap, budget, vendor management, and team development, ensuring effective log collection, integration with SIEM/SOAR, and ongoing platform

Qualifications

• Proven leadership of security operations teams.
• Strong experience with Cortex XDR implementation and tuning.
• Experience coordinating across SOC, IT, and compliance teams.

Responsabilités

• Lead Cortex XDR security operations program.
• Balance hands-on incident response with strategic improvements.
• Partner with SOC leadership on roadmap, budget and vendor management.
• Develop detection engineering initiatives and security posture enhancements.
• Oversee incident response playbooks, runbooks and on-call rotations.
• Coordinate breach investigations and post-incident reviews.
• Maintain audit trails for policy changes and access controls.

Connaissances

Leadership

Cortex XDR

Incident response

SOC operations

Budget & vendor management

Team development

Formation

Bachelor's degree in Cybersecurity or related field

CISSP/CISA or equivalent

Outils

Cortex XDR

SIEM

SOAR

Log management

Description du poste

Lead the Palo Alto Cortex XDR security operations program with responsibility for technical leadership, platform optimization, and functional oversight of the analyst team-members. Balances hands‑on technical involvement in critical incidents with initiatives around detection engineering, security policy, and organizational security posture.

Partners with SOC leadership on roadmap, budget, vendor management, and team development

KEY RESPONSBILITIES

Technical Specialist

Hands-on experience on XDR Platform Administration

• Finetuning and maintain Cortex XDR security platform inclusive of reducing False Positive alerts, setting detection rules
• Ensure integration of Cortex XDR solution with SIEM, SOAR etc.
• Manage Cortex XDR platform and agent upgrades, patches and system health monitoring
• Ensure proper log collection and telemetry integration across security tools
• Develop automated workflows and response playbooks
• Optimize alerting mechanisms and detection capabilities
• Support SOC & analysts process improvements
• Set incident response strategy, escalation policies, and runbooks
• Lead critical incident response and 24/7 on-call rotation
• Report incident status/risk to execs and customers; coordinate breach investigation and disclosure with IR
• Set detection/response/containment targets and drive post-incident reviews for improvement
• Escalate strategic platform/detection decisions to management
• Coordinate with IT, compliance, etc. on policy and infrastructure changes
• Manage vendor relationships for SLA-impacting issues
• Report budget overages and staffing/training gaps affecting performance

Reporting & Documentation:

• Prepare monthly Cortex XDR/KPI reports and quarterly business reviews for leadership
• Document platform architecture, configuration standards, and detection roadmap
• Maintain audit trails for policy/platform changes and access controls
• Document threats, detection gaps, and improvement recommendations
• Maintain team performance/coaching records
• Maintain runbooks, playbooks, and troubleshooting guide
• Align XDR strategy/budget with leadership
• Partner with security, compliance, IT, and infrastructure teams on platform integration and deployment
• Coordinate with Product on licensing, SLAs, and roadmap feedback
• Develop multi-year XDR strategy aligned with threat profile and business goals
• Lead platform modernization, tool consolidation, and detection optimization