Senior SOC Engineer — Incident Response & Threat Hunting

Neuron Solutions Sdn. Bhd.; Kuala Lumpur; Hybrid; MYR 180,000 - 280,000; Full time

Job summary

Neuron Solutions Sdn. Bhd. seeks an experienced cyber security operations lead to act as the SPIOC for our MSSP Tier 1 SOC, handling SIEM alerts, incident response, and executive reporting across Malaysia and the UK.

You will conduct RCA, produce incident reports, and drive weekly/monthly security updates, while monitoring Entra ID/AD for risks and coordinating vulnerability management.

Qualifications

• Bachelor's degree in Cyber Security, Information Technology, or related field.
• 7–9 years of experience in cyber security operations, incl. Tier 2 SOC or IR.
• Experience with MSSP-managed Tier 1 SOC is preferred.
• Hands-on with Microsoft Sentinel, KQL, rules, onboarding, tuning.
• Strong knowledge of Microsoft 365, Entra ID security monitoring.
• Experience with CrowdStrike Falcon EDR and firewall security.
• Familiarity with NIST CSF, ISO 27001, vulnerability management, audits.

Responsibilities

• Serve as SPOC for MSSP's Tier 1 SOC team across Malaysia and UK.
• Manage SIEM alerts, ITSM tickets, and incident response per CIR plan.
• Lead RCA, incident reports, and weekly/monthly security updates.
• Monitor Entra ID and on-prem AD for risky sign-ins and MFA gaps.
• Coordinate vulnerability scans, CVE reviews, and firewall audits.
• Develop security policies, playbooks, DR/BCP, and risk registers.
• Create Sentinel rules, KQL queries, and automation for threat hunting.
• Deliver cyber security awareness training and phishing simulations.

Skills

Incident response

Root Cause Analysis

Threat hunting

Executive reporting

Stakeholder management

SLA compliance

Cloud security monitoring

Education

Bachelor's degree in Cyber Security or IT

Tools

Microsoft Sentinel

CrowdStrike Falcon EDR

Entra ID

Active Directory

NIST CSF / ISO 27001

Fortinet FortiGate

Job description

Neuron Solutions Sdn. Bhd. seeks an experienced cyber security operations lead to act as the SPIOC for our MSSP Tier 1 SOC, handling SIEM alerts, incident response, and executive reporting across Malaysia and the UK.

You will conduct RCA, produce incident reports, and drive weekly/monthly security updates, while monitoring Entra ID/AD for risks and coordinating vulnerability management.