SOC Lead — Threat Detection & Incident Response

DKSH; Kuala Lumpur; On-site; MYR 180,000 - 280,000; Full time

Job summary

DKSH in Malaysia is seeking a Security Operations Center Lead to steer detection, response, and continuous improvement across regional environments. You will oversee alert triage, incident management, and reporting to ensure timely containment and alignment with business priorities.

The role requires a strong background in SOC operations, incident response, threat hunting, and leadership. You will mentor analysts, coordinate with infrastructure, app, network, cloud teams, and communicate status

Qualifications

• Bachelor's degree in cybersecurity, IT, CS or equivalent.
• 7+ years of cybersecurity experience including SOC operations and incident response.
• Hands-on with MITRE ATT&CK, threat hunting, and alert tuning.
• Proficient in KQL, Sentinel, and Defender XDR.

Responsibilities

• Lead day-to-day SOC operations including alert triage and incident queue management.
• Develop and improve SOC playbooks, runbooks, and evidence handling practices.
• Drive proactive threat hunting using Defender XDR, Sentinel, EDR, and SIEM.
• Coordinate cross-functional incident responses with IT, network, cloud teams.
• Communicate incident status and business impact to leadership.
• Mentor SOC analysts during investigations and escalations.

Skills

SOC operations

Incident response

Threat hunting

KQL

Microsoft Sentinel

Defender XDR

Leadership

Executive communication

Evidence handling

Education

Bachelor's degree in Cybersecurity/IT/CS

CISSP Certification

GIAC certifications (GCIH/GCIA/GCFA)

SC-200/AZ-500 knowledge

Tools

KQL

Microsoft Sentinel

Defender for Endpoint

Microsoft Defender XDR

SIEM tooling

EDR

Job description

DKSH in Malaysia is seeking a Security Operations Center Lead to steer detection, response, and continuous improvement across regional environments. You will oversee alert triage, incident management, and reporting to ensure timely containment and alignment with business priorities.

The role requires a strong background in SOC operations, incident response, threat hunting, and leadership. You will mentor analysts, coordinate with infrastructure, app, network, cloud teams, and communicate status