Senior XDR Platform Lead — Security Operations

Telekom Malaysia; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Job summary

Telekom Malaysia seeks a senior security operations leader to drive the Cortex XDR program. You will provide technical leadership, optimize the platform, and oversee analysts.

The role blends hands-on incident response with detection engineering, security policy, and strengthening organizational security posture. You will partner with SOC leadership on roadmap, budget, vendor management, and team development, ensuring effective log collection, integration with SIEM/SOAR, and ongoing platform

Qualifications

• Proven leadership of security operations teams.
• Strong experience with Cortex XDR implementation and tuning.
• Experience coordinating across SOC, IT, and compliance teams.

Responsibilities

• Lead Cortex XDR security operations program.
• Balance hands-on incident response with strategic improvements.
• Partner with SOC leadership on roadmap, budget and vendor management.
• Develop detection engineering initiatives and security posture enhancements.
• Oversee incident response playbooks, runbooks and on-call rotations.
• Coordinate breach investigations and post-incident reviews.
• Maintain audit trails for policy changes and access controls.

Skills

Leadership

Cortex XDR

Incident response

SOC operations

Budget & vendor management

Team development

Education

Bachelor's degree in Cybersecurity or related field

CISSP/CISA or equivalent

Tools

Cortex XDR

SIEM

SOAR

Log management

Job description

Telekom Malaysia seeks a senior security operations leader to drive the Cortex XDR program. You will provide technical leadership, optimize the platform, and oversee analysts.

The role blends hands-on incident response with detection engineering, security policy, and strengthening organizational security posture. You will partner with SOC leadership on roadmap, budget, vendor management, and team development, ensuring effective log collection, integration with SIEM/SOAR, and ongoing platform