Senior XDR & Endpoint Security Lead

Telekom Malaysia; Kuala Lumpur; On-site; MYR 180,000 - 320,000; Full time

Job summary

Telekom Malaysia is seeking a senior XDR Security Lead to drive the XDR operations program, provide technical leadership, platform optimization and oversee an analyst team. You will balance hands-on incident work with detection engineering and security posture improvements.

Reporting to SOC leadership, you will manage roadmap, budget, vendor relationships, and mentor staff while aligning with compliance and IT teams on deployment and modernization.

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, or related field.
• CISSP, GCIH, GCIA, or equivalent advanced cybersecurity certifications are highly preferred
• 8+ years of hands-on experience with deep expertise in EDR/XDR architecture, detection engineering, threat hunting, and threat research

Responsibilities

• XDR Platform Administration: Finetuning and maintaining the XDR security platform, reduce false positives, set detection rules, ensure SIEM/SOAR integrations, manage upgrades and health monitoring, log collection and telemetry integration, develop automated workflows and playbooks, optimize alerts and detection.
• Incident Response: Define incident response strategy, escalation policies, runbooks; lead critical incident response and 24/7 on-call rotation; report status and risk to execs and customers; coordinate breach investigation and post-incident reviews.
• Escalation: Escalate platform/detection decisions to management; coordinate with IT, compliance on policy changes; manage vendor relationships; report budget and staffing gaps.
• Reporting & Documentation: Prepare monthly XDR/KPI reports and quarterly business reviews; document platform architecture and configuration; maintain audit trails and runbooks; document threats and improvements; tracking team performance.
• Collaboration: Align XDR strategy/budget with leadership; partner with security, compliance, IT, infra on deployment; coordinate with Product on licensing and roadmap feedback.
• Long-term XDR strategy: Develop multi-year strategy; lead platform modernization and automation; evaluate new tech and drive best practices; advise senior management on endpoint security strategy.

Skills

EDR/XDR architecture

Threat hunting

Detection engineering

Incident response leadership

Team mentorship

Education

Bachelor's degree in Cybersecurity or related field

Tools

Palo Alto Cortex XDR

Microsoft Defender XDR

CrowdStrike Falcon

SentinelOne

Trend Micro Vision One

Splunk

Microsoft Sentinel (Azure Sentinel)

Elasticsearch

Job description

Telekom Malaysia is seeking a senior XDR Security Lead to drive the XDR operations program, provide technical leadership, platform optimization and oversee an analyst team. You will balance hands-on incident work with detection engineering and security posture improvements.

Reporting to SOC leadership, you will manage roadmap, budget, vendor relationships, and mentor staff while aligning with compliance and IT teams on deployment and modernization.