SIEM MDR Infra Lead: SOC Ops & Tuning

Atos; Cyberjaya; On-site; MYR 120,000 - 200,000; Full time

Job summary

Atos in Cyberjaya, Malaysia seeks an experienced SIEM MDR Infra specialist to lead the day-to-day SIEM operations and ensure platform health, log-source availability, and high-quality detections for SOC operations.

You will guide escalation handling, tune detection rules, and coordinate with cross-functional teams to resolve SIEM issues, while maintaining runbooks and documentation and contributing to disaster recovery testing.

Qualifications

• 5–7+ years of experience in SIEM, SOC, or cybersecurity operations.
• Hands-on experience with Microsoft Sentinel or another enterprise SIEM.
• Strong knowledge of Kusto Query Language (KQL) and log analysis.
• Experience handling technical escalations and coordinating with multiple teams.

Responsibilities

• Lead and manage the SIEM team, allocating daily operational activities and monitoring delivery.
• Act as the primary technical escalation point for complex SIEM issues.
• Monitor SIEM platform health, log ingestion, connectors, parsing, and data quality.
• Ensure critical log sources are onboarded, available, and continuously monitored.
• Review and manage detection and correlation rules, including tuning and false-positive reduction.
• Coordinate with SOC, infrastructure, cloud, network, and application teams to resolve SIEM-related issues.
• Track team activities, pending tasks, technical issues, and operational milestones.
• Ensure incidents and service requests are resolved within agreed SLA and OLA timelines.
• Review SIEM changes and ensure appropriate testing and implementation.
• Support the onboarding of new log sources, integrations, and security use cases.
• Review technical incidents, identify root causes, and implement corrective actions.
• Maintain SIEM standard operating procedures, runbooks, and technical documentation.
• Support SOC teams during major incidents and provide technical expertise.
• Participate in disaster recovery and business continuity testing to ensure SIEM monitoring continuity.
• Provide regular operational updates and reports to management.

Skills

SIEM/SOC ops

Microsoft Sentinel

KQL

Log analysis

Incident management

Leadership

Communication

Tools

Splunk

QRadar

ArcSight

Trellix

Job description

Atos in Cyberjaya, Malaysia seeks an experienced SIEM MDR Infra specialist to lead the day-to-day SIEM operations and ensure platform health, log-source availability, and high-quality detections for SOC operations.

You will guide escalation handling, tune detection rules, and coordinate with cross-functional teams to resolve SIEM issues, while maintaining runbooks and documentation and contributing to disaster recovery testing.