Senior SIEM Team Lead — Detection & Incident Response

Tentacle Tech; Cyberjaya; On-site; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Mentorship and professional growth

Career progression pathway

Supportive team culture

Hands-on mentorship

Job summary

Tentacle Tech is seeking an experienced SIEM Team Lead to own day-to-day SIEM operations within a fast-paced technology environment. You will lead a team of analysts, act as the key technical escalation point, and ensure the SIEM platform remains healthy, well-tuned, and aligned with SOC requirements.

This role combines hands-on security engineering with team leadership, offering opportunities for mentorship and career growth within a growing IT consulting firm based in Malaysia.

Qualifications

• 5-7+ years in SIEM, SOC or cybersecurity operations.
• Hands-on with Microsoft Sentinel or enterprise SIEM.
• Knowledge of KQL and log analysis; detection tuning/use-case development.
• Experience handling technical escalations and coordinating across teams.
• Understanding of incident, change, and problem management processes.
• Strong troubleshooting, leadership and communication skills.
• Certifications such as SC-200, GCIH, GCIA, or ITIL 4 are advantageous.

Responsibilities

• Lead and manage the SIEM team, allocating daily operational activities.
• Serve as the primary technical escalation point for complex SIEM issues.
• Monitor SIEM platform health, log ingestion, connectors, parsing and data quality.
• Review and manage detection rules, correlation rules, tuning, and false‑positive reduction.
• Coordinate with SOC, infrastructure, cloud, network and application teams to resolve SIEM issues.
• Ensure incidents and service requests are resolved within SLA/OLA timelines.
• Maintain SIEM SOPs, runbooks, and technical documentation; support SOC during major incidents.

Skills

SIEM expertise

Team leadership

Incident management

Communication skills

Microsoft Sentinel

KQL

Log analysis

Job description

Tentacle Tech is seeking an experienced SIEM Team Lead to own day-to-day SIEM operations within a fast-paced technology environment. You will lead a team of analysts, act as the key technical escalation point, and ensure the SIEM platform remains healthy, well-tuned, and aligned with SOC requirements.

This role combines hands-on security engineering with team leadership, offering opportunities for mentorship and career growth within a growing IT consulting firm based in Malaysia.