Senior SIEM Lead: Drive SOC Ops & Detection

Tentacle Technologies; Sepang; On-site; MYR 180,000 - 280,000; Full time

Benefits offered by this job

Mentorship and professional growth

Career progression pathway

Collaborative team culture

Impactful projects in tech sector

Job summary

Tentacle Tech is seeking an experienced SIEM Team Lead in Malaysia to own day-to-day SIEM operations within a fast-paced technology environment. You will lead a team of analysts, act as the key technical escalation point, and ensure the SIEM platform remains healthy and fully aligned with SOC requirements.

This role offers hands-on technical leadership, incident coordination, and collaboration with SOC, infrastructure, cloud, and application teams to drive detection tuning and data quality

Qualifications

• 5–7+ years in SIEM, SOC, or cybersecurity operations.
• Hands-on with Microsoft Sentinel or equivalent SIEM.
• Knowledge of KQL and log analysis; capable of incident coordination across teams.

Responsibilities

• Lead and manage the SIEM team, allocating daily operational activities.
• Serve as the primary technical escalation point for complex SIEM issues.
• Monitor SIEM platform health, log ingestion, connectors, parsing, and data quality.
• Review and manage detection rules, correlation rules, tuning, and false positives.
• Coordinate with SOC, infra, cloud, network and application teams to resolve SIEM issues.
• Ensure incidents and service requests are resolved within SLA/OLA timelines.
• Maintain SIEM SOPs, runbooks and documentation; support SOC during major incidents.

Skills

Leadership

Analytical thinking

Communication

Education

Cybersecurity certifications

Tools

Microsoft Sentinel

KQL

Job description

Tentacle Tech is seeking an experienced SIEM Team Lead in Malaysia to own day-to-day SIEM operations within a fast-paced technology environment. You will lead a team of analysts, act as the key technical escalation point, and ensure the SIEM platform remains healthy and fully aligned with SOC requirements.

This role offers hands-on technical leadership, incident coordination, and collaboration with SOC, infrastructure, cloud, and application teams to drive detection tuning and data quality