SOC Manager

Quess; Shah Alam; On-site; MYR 120,000 - 180,000; Full time

Job summary

Jora Malaysia seeks a seasoned SOC Manager to oversee a 24x7 security center and its analysts, ensuring delivery on time and within SLA commitments while serving as the escalation point for the SOC team.

You will lead incident response, drive improvements in detection capabilities, and coordinate with stakeholders to strengthen cybersecurity across client infrastructure.

Qualifications

• Minimum 5-8 years in cybersecurity, SOC operations, security monitoring, incident response, or managed security services.
• 3-4 years in a supervisory or managerial role.
• Strong knowledge of SIEM, SOAR, EDR/XDR, threat intelligence, vulnerability management, and incident response processes.
• Good understanding of security threats, attack techniques, threat hunting, digital forensics, network security, and security operations best practices.
• Demonstrated ability to lead a group of analysts, motivate, coach, and manage SOC teams, including shift-based and 24/7 operations.
• Strong experience in handling and coordinating high-severity and major cybersecurity incidents, including stakeholder communication and escalation.

Responsibilities

• SOC Operations Management – Oversee daily SOC operations, ensuring 24/7 monitoring, alert management, incident detection, and response within SLAs.
• Incident Response & Escalation – Lead major security incident investigations, timely escalation, containment, resolution, RCA, and post-incident reviews.
• Team Leadership & Development – Manage SOC personnel, workforce planning, shift coverage, performance management, coaching and training.
• Service Delivery & Customer Management – Ensure quality, timely delivery of SOC services, monitor SLAs and KPIs, and act as escalation point for critical incidents.
• Continuous Improvement & Security Enhancement – Drive improvements in SOC processes, detection capabilities, automation, threat intel, and IR procedures.

Skills

SOC leadership

Security monitoring

Incident response

Team management

SIEM

SOAR

EDR/XDR

Threat intelligence

Vulnerability management

Stakeholder communication

Job description

Jora Malaysia will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

• The SOC Manager is responsible for overseeing the operations of a 24x7x365 Security Center and its analysts who monitor security tools, assess threats, and risks involving client infrastructure. In this role, you are responsible for ensuring that all Managed Service deliverables are produced on time and within strict SLA time frame and responding to customers at all times. Acting as the escalation point for the SOC technical team, the SOC Manager also acts as a liaison between the SOC Account Managers and Business operations to facilitate and deliver services to the customers.

Responsibilities

• SOC Operations Management – Oversee daily SOC operations, ensuring effective 24/7 security monitoring, alert management, incident detection, and response in line with SLAs and operational standards.
• Incident Response & Escalation – Lead the investigation and management of major security incidents, ensuring timely escalation, containment, resolution, root cause analysis, and post-incident reviews.
• Team Leadership & Development – Manage and develop SOC personnel, including workforce planning, shift coverage, performance management, coaching, training, and maintaining a high-performing team.
• Service Delivery & Customer Management – Ensure quality and timely delivery of SOC services, monitor customer SLAs and KPIs, and act as the key escalation point for critical customer security incidents and operational issues.
• Continuous Improvement & Security Enhancement – Drive improvements in SOC processes, security detection capabilities, technologies, automation, threat intelligence, and incident response procedures to strengthen overall cybersecurity effectiveness.

Requirements

• Minimum 5-8 years of relevant experience in cybersecurity, SOC operations, security monitoring, incident response, or managed security services, with 3–4 years in a supervisory or managerial role.
• Strong knowledge of SIEM, SOAR, EDR/XDR, threat intelligence, vulnerability management, and incident response processes.
• Good understanding of security threats, attack techniques, threat hunting, digital forensics, network security, and security operations best practices.
• Demonstrated ability to lead a group of analysts, motivate, coach, and manage SOC teams, including shift-based and 24/7 operations.
• Strong experience in handling and coordinating high-severity and major cybersecurity incidents, including stakeholder communication and escalation.