Security Operation Centre (SOC) Manager - Immediate available

Private Advertiser; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Private Advertiser is seeking an experienced SOC Manager to lead a 24/7 Security Operations Centre in Kuala Lumpur. You will oversee shift planning, team leadership, and advanced incident response, with direct responsibility for Microsoft Sentinel configuration and SOC runbooks.

The role requires 8+ years in cybersecurity or security operations and 2–3 years in SOC leadership, delivering strong performance against SLAs and continuous improvement in security posture.

Qualifications

• Senior experience in cybersecurity or security operations (8+ years).
• 2–3 years in SOC leadership or supervisory capacity.
• Experience managing 24/7 shift-based teams.
• Hands-on with Microsoft Sentinel and related tools.
• Strong incident management and SLAs knowledge.
• Proven ability to recruit, coach, and mentor SOC staff.

Responsibilities

• Manage and lead the 24/7 Security Operations Centre, including staffing and rosters.
• Oversee Microsoft Sentinel analytics, workbooks, automation, and dataConnector health.
• Drive incident management end-to-end—triage, investigation, containment, and post-incident review.
• Ensure SOC workflows align with ITSM processes and SLAs.
• Perform Level 2 investigations and root cause analysis for complex incidents.
• Review security posture across architecture, network, and infrastructure.

Skills

SOC leadership

Incident management

ITSM processes

Root cause analysis

Team coaching

Shift scheduling

Tools

Microsoft Sentinel

Logic Apps

Playbooks

Job description

Security Operation Centre (SOC) Manager - Immediate available

We are seeking an experienced and driven SOC Manager to lead our 24/7 Security Operations Centre based in Kuala Lumpur. Reporting within the Security Operations department, you will own the end-to-end running of the SOC — from shift planning and team leadership through to advanced incident response and the continuous tuning of our Microsoft Sentinel platform.

You will lead a multi-tiered team of SOC analysts, ensuring uninterrupted monitoring and response coverage while fostering a culture of growth, accountability, and technical excellence. As the escalation point for complex incidents, you will personally perform Level 2 root cause analysis and conduct security posture reviews across architecture, network, and infrastructure domains ans signoff.

In this role, you will bridge security operations and IT service management, ensuring security incidents and service requests are handled within defined SLAs through seamless ITSM integration. Success in this position means a resilient, well-staffed, and continuously improving SOC that protects the organisation around the clock.

Responsibilities

Manage and lead the 24/7 Security Operations Centre, including planning, scheduling, and maintaining team shift rosters to guarantee uninterrupted monitoring and response coverage.

Oversee the operation and continuous tuning of Microsoft Sentinel, including analytics rules, workbooks, automation (Logic Apps/playbooks), and data connector health.

Drive incident management end-to-end — triage, investigation, escalation, containment, and post-incident review — in line with SLAs and established runbooks.

Ensure seamless integration between SOC workflows and ITSM processes, including ticket creation, categorization, prioritization, and SLA tracking for security incidents and service requests.

Perform Level 2 investigations and root cause analysis for complex security incidents, providing technical depth and escalation leadership.

Review the organisation's security posture across architecture, network, and infrastructure domains, translating findings into actionable detection and hardening recommendations.

Recruit, train, coach, and mentor SOC analysts across all tiers, conducting performance reviews and building individual development plans.

Develop, maintain, and continuously improve SOC runbooks, playbooks, and standard operating procedures.

Report on SOC performance, incident trends, and KPIs/SLAs to stakeholders and senior management, driving continuous service improvement.

Perform Level 2 root cause analysis and conduct security posture reviews across architecture, network, and infrastructure domains and signoff.

Requirements

Proven experience (typically 8+ years) in cybersecurity or security operations, with at least 2–3 years in a SOC leadership or supervisory capacity managing 24/7 shift-based teams.

Hands-on expertise with Microsoft Sentinel, including analytics rules, workbooks, Logic Apps/playbooks, and data connector management.

Solid experience in security incident management — triage, investigation, containment, escalation, and post-incident review — within SLA-driven environments.

Strong working knowledge of ITSM processes and tooling, including ticket lifecycle management, categorization, prioritization, and SLA tracking.

Technical competence in root cause analysis and reviewing security posture across architecture, network, and infrastructure domains.

Experience recruiting, coaching, and mentoring SOC analysts at L1 and L2 levels, including performance reviews and development planning.

Demonstrated ability to manage shift rosters and workforce scheduling to maintain continuous coverage.

Support ISO, NACSA and other documentations for the organizations.