SIEM Team Lead

TENTACLE SSO SDN BHD; Cyberjaya; On-site; MYR 150,000 - 210,000; Full time

Benefits offered by this job

Career progression

Professional development support

Collaborative team culture

Mentorship

Job summary

Tentacle Tech is seeking an experienced SIEM Team Lead to own day-to-day SIEM operations in a fast-paced tech environment in Malaysia. You will lead analysts, act as the technical escalation point, and ensure SIEM health and data quality while aligning with SOC requirements.

Ideal candidates bring 5–7+ years in SIEM/SOC, hands-on MS Sentinel, strong log analysis and tuning skills, and the ability to coordinate across multiple teams. Certifications like SC-200 or ITIL 4 are a plus.

Qualifications

• 5–7+ years in SIEM, SOC or cyber operations.
• Hands-on with Microsoft Sentinel or enterprise SIEM.
• Strong log analysis and detection tuning.
• Experience coordinating incidents across multiple teams.
• Certifications such as SC-200, GCIH, GCIA or ITIL 4 are advantageous.

Responsibilities

• Lead and manage the SIEM team, coordinating daily operational tasks.
• Serve as the primary technical escalation point for complex SIEM issues.
• Monitor SIEM health, log ingestion, connectors, and data quality.
• Review and tune detection rules and reduce false positives.
• Coordinate with SOC, infra, cloud, network and apps teams to resolve issues.
• Ensure incidents and service requests meet SLA/OLA timelines.
• Maintain SOPs, runbooks, and documentation; support during major incidents.

Skills

SIEM experience

SOC operations

Team leadership

KQL

Tools

Microsoft Sentinel

Job description

Tentacle Tech is an IT and software development consulting company serving some of Malaysia's largest enterprises. We deliver technology solutions, software development services, and IT consulting across multiple industries. We are looking for a talented professional to join our growing team.

The Role

We are seeking an experienced SIEM Team Lead to take ownership of day-to-day SIEM operations within a fast-paced technology environment. In this role, you will lead a team of analysts, act as the key technical escalation point, and ensure the SIEM platform remains healthy, well-tuned, and fully aligned with SOC requirements. This is a great opportunity for a seasoned cybersecurity professional ready to combine hands-on technical expertise with team leadership.

What You'll Do

• Lead and manage the SIEM team, allocating daily operational activities
• Serve as the primary technical escalation point for complex SIEM issues
• Monitor SIEM platform health, log ingestion, connectors, parsing, and data quality
• Review and manage detection rules, correlation rules, tuning, and false-positive reduction
• Coordinate with SOC, infrastructure, cloud, network, and application teams to resolve SIEM-related issues
• Ensure incidents and service requests are resolved within agreed SLA/OLA timelines
• Maintain SIEM SOPs, runbooks, and technical documentation, and support SOC teams during major incidents

What We're Looking For

• 5-7+ years of experience in SIEM, SOC, or cybersecurity operations
• Strong hands-on experience with Microsoft Sentinel or another enterprise SIEM platform
• Good knowledge of KQL and log analysis, including detection tuning and use-case development
• Experience handling technical escalations and coordinating across multiple teams
• Good understanding of incident, change, and problem management processes
• Strong troubleshooting, leadership, and communication skills
• Relevant certifications such as SC-200, GCIH, GCIA, or ITIL 4 are an advantage

What We Offer

• Opportunity to work on impactful projects within the technology sector
• Hands-on mentorship and professional development support
• Clear pathway for career progression within a growing consulting firm
• Supportive and collaborative team culture