SOC Manager

Quess Malaysia; Shah Alam; On-site; MYR 120,000 - 180,000; Full time

Job summary

Quess Malaysia is seeking a seasoned SOC Manager to oversee a 24x7 security center and its analysts. You will ensure on-time delivery of Managed Service outputs, monitor SLA compliance, and serve as the escalation point between SOC operations and business teams.

You will lead a high‑performing team, drive continuous improvement in detection, response, and automation, and coordinate incident response, threat intelligence, and stakeholder communications across client engagements.

Qualifications

• Minimum 5-8 years of relevant experience in cybersecurity, SOC operations, security monitoring, incident response, or managed security services, with 3–4 years in a supervisory or managerial role.

Responsibilities

• SOC Operations Management – Oversee daily SOC operations, ensuring effective 24/7 security monitoring, alert management, incident detection, and response in line with SLAs and operational standards.
• Incident Response & Escalation – Lead the investigation and management of major security incidents, ensuring timely escalation, containment, resolution, root cause analysis, and post-incident reviews.
• Team Leadership & Development – Manage and develop SOC personnel, including workforce planning, shift coverage, performance management, coaching, training, and maintaining a high-performing team.
• Service Delivery & Customer Management – Ensure quality and timely delivery of SOC services, monitor customer SLAs and KPIs, and act as the key escalation point for critical customer security incidents and operational issues.
• Continuous Improvement & Security Enhancement – Drive improvements in SOC processes, security detection capabilities, technologies, automation, threat intelligence, and incident response procedures to strengthen overall cybersecurity effectiveness.

Skills

SOC operations

Incident escalation

Team leadership

Customer management

Cybersecurity awareness

Tools

SIEM

SOAR

EDR/XDR

Threat intel

Vulnerability management

Job description

• The SOC Manager is responsible for overseeing the operations of a 24x7x365 Security Center and its analysts who monitor security tools, assess threats, and risks involving client infrastructure. In this role, you are responsible for ensuring that all Managed Service deliverables are produced on time and within strict SLA time frame and responding to customers at all times. Acting as the escalation point for the SOC technical team, the SOC Manager also acts as a liaison between the SOC Account Managers and Business operations to facilitate and deliver services to the customers.

Responsibilities

• SOC Operations Management – Oversee daily SOC operations, ensuring effective 24/7 security monitoring, alert management, incident detection, and response in line with SLAs and operational standards.
• Incident Response & Escalation – Lead the investigation and management of major security incidents, ensuring timely escalation, containment, resolution, root cause analysis, and post-incident reviews.
• Team Leadership & Development – Manage and develop SOC personnel, including workforce planning, shift coverage, performance management, coaching, training, and maintaining a high-performing team.
• Service Delivery & Customer Management – Ensure quality and timely delivery of SOC services, monitor customer SLAs and KPIs, and act as the key escalation point for critical customer security incidents and operational issues.
• Continuous Improvement & Security Enhancement – Drive improvements in SOC processes, security detection capabilities, technologies, automation, threat intelligence, and incident response procedures to strengthen overall cybersecurity effectiveness.

Requirements

• Minimum 5-8 years of relevant experience in cybersecurity, SOC operations, security monitoring, incident response, or managed security services, with 3–4 years in a supervisory or managerial role.
• Strong knowledge of SIEM, SOAR, EDR/XDR, threat intelligence, vulnerability management, and incident response processes.
• Good understanding of security threats, attack techniques, threat hunting, digital forensics, network security, and security operations best practices.
• Demonstrated ability to lead a group of analysts, motivate, coach, and manage SOC teams, including shift-based and 24/7 operations.
• Strong experience in handling and coordinating high-severity and major cybersecurity incidents, including stakeholder communication and escalation.