SOC Manager

Neuron Solutions Sdn Bhd; Kuala Lumpur; On-site; MYR 180,000 - 260,000; Full time

Job summary

Neuron Solutions Sdn Bhd in Kuala Lumpur is seeking a seasoned SOC Manager to lead a 24/7 Security Operations Centre. You will own shift planning, runbooks, and incident response across Microsoft Sentinel, ITSM integration, and escalation for complex events.

You will bridge security operations with IT service management, drive continuous improvement, and mentor SOC analysts while maintaining strong governance and KPI delivery.

Qualifications

• 8+ years in cybersecurity or security operations with 2–3 years in SOC leadership.
• Hands-on with Microsoft Sentinel and related automation.
• Strong ITSM and SLA-driven incident handling experience.

Responsibilities

• Lead 24/7 SOC operations, planning shifts and ensuring continuous coverage.
• Oversee Microsoft Sentinel tuning, analytics, playbooks, and data connectors.
• Drive end-to-end incident management from triage to post-incident review.
• Ensure SOC workflows align with ITSM processes and SLAs.
• Recruit, coach, and mentor SOC analysts across tiers.

Skills

Microsoft Sentinel

Incident management

ITSM

SOC leadership

Team scheduling

Tools

Logic Apps

Workbooks

Data connectors

Job description

We are seeking an experienced and driven SOC Manager to lead our 24/7 Security Operations Centre based in Kuala Lumpur. Reporting within the Security Operations department, you will own the end-to-end running of the SOC - from shift planning and team leadership through to advanced incident response and the continuous tuning of our Microsoft Sentinel platform.

You will lead a multi-tiered team of SOC analysts, ensuring uninterrupted monitoring and response coverage while fostering a culture of growth, accountability, and technical excellence. As the escalation point for complex incidents, you will personally perform Level 2 root cause analysis and conduct security posture reviews across architecture, network, and infrastructure domains and signoff.

In this role, you will bridge security operations and IT service management, ensuring security incidents and service requests are handled within defined SLAs through seamless ITSM integration. Success in this position means a resilient, well-staffed, and continuously improving SOC that protects the organisation around the clock.

Responsibilities

• Manage and lead the 24/7 Security Operations Centre, including planning, scheduling, and maintaining team shift rosters to guarantee uninterrupted monitoring and response coverage.
• Oversee the operation and continuous tuning of Microsoft Sentinel, including analytics rules, workbooks, automation (Logic Apps/playbooks), and data connector health.
• Drive incident management end-to-end - triage, investigation, escalation, containment, and post-incident review - in line with SLAs and established runbooks.
• Ensure seamless integration between SOC workflows and ITSM processes, including ticket creation, categorization, prioritization, and SLA tracking for security incidents and service requests.
• Perform Level 2 investigations and root cause analysis for complex security incidents, providing technical depth and escalation leadership.
• Review the organisation's security posture across architecture, network, and infrastructure domains, translating findings into actionable detection and hardening recommendations.
• Recruit, train, coach, and mentor SOC analysts across all tiers, conducting performance reviews and building individual development plans.
• Develop, maintain, and continuously improve SOC runbooks, playbooks, and standard operating procedures.
• Report on SOC performance, incident trends, and KPIs/SLAs to stakeholders and senior management, driving continuous service improvement.
• Perform Level 2 root cause analysis and conduct security posture reviews across architecture, network, and infrastructure domains and signoff.

Requirements

• Proven experience (typically 8+ years) in cybersecurity or security operations, with at least 2-3 years in a SOC leadership or supervisory capacity managing 24/7 shift-based teams.
• Hands-on expertise with Microsoft Sentinel, including analytics rules, workbooks, Logic Apps/playbooks, and data connector management.
• Solid experience in security incident management - triage, investigation, containment, escalation, and post-incident review - within SLA-driven environments.
• Strong working knowledge of ITSM processes and tooling, including ticket lifecycle management, categorization, prioritization, and SLA tracking.
• Technical competence in root cause analysis and reviewing security posture across architecture, network, and infrastructure domains.
• Experience recruiting, coaching, and mentoring SOC analysts at L1 and L2 levels, including performance reviews and development planning.
• Demonstrated ability to manage shift rosters and workforce scheduling to maintain continuous coverage.
• Support ISO, NACSA and other documentations for the organizations.