SOC Lead & IR Platform Architect

XL Axiata; Kuala Lumpur; On-site; MYR 240,000 - 360,000; Full time

Job summary

XL Axiata is seeking a senior security lead in Kuala Lumpur to oversee security monitoring, IR, and platform engineering. The role blends hands-on investigations with leadership, coordinating IR responders, PE/SIEM engineers, and client onboarding to ensure robust detections and rapid response.

You will drive incident containment, root-cause analysis, and remediation while shaping detection lifecycles, playbooks, and threat intelligence integration across the team.

Qualifications

• Hands-on SIEM and IR with leadership responsibility.
• Experience in coordinating P1/P2 incidents and multi-team actions.
• Strong knowledge of threats, detections and response playbooks.
• Ability to onboard clients, manage data ingestion, and build detections.

Responsibilities

• Lead high-severity incidents end-to-end and coordinate IR responders.
• Act as senior escalation point for complex investigations.
• Guide hands-on analysis across endpoints, network and telemetry.
• Maintain IR SOPs and escalation workflows for improvements.
• Lead platform engineering for SIEM onboarding and detections.

Skills

SIEM capability

Platform engineering

Automation/SOAR

Incident response

Digital forensics

Threat hunting

MITRE ATT&CK

Cloud security monitoring

Communication under pressure

Education

Degree/Diploma in IT or Cybersecurity

Certifications: GCIH/GCFA/GREM

Tools

Microsoft Defender XDR

Microsoft Sentinel

Splunk

QRadar

CrowdStrike

Job description

XL Axiata is seeking a senior security lead in Kuala Lumpur to oversee security monitoring, IR, and platform engineering. The role blends hands-on investigations with leadership, coordinating IR responders, PE/SIEM engineers, and client onboarding to ensure robust detections and rapid response.

You will drive incident containment, root-cause analysis, and remediation while shaping detection lifecycles, playbooks, and threat intelligence integration across the team.