SOC Operations Lead - Banking Cyber Defense

Hong Leong Bank; Malaysia; On-site; MYR 180,000 - 300,000; Full time

Job summary

Hong Leong Bank is seeking a SOC Manager / Lead to direct day-to-day security operations, triage, and detection engineering. You will oversee an internal Tier 2 security team and coordinate with an external MSSP to ensure SLA compliance and effective incident response.

You will curate and display real-time SOC dashboards, monitor tooling health, and maintain playbooks tailored to banking threats. This role demands strong leadership and deep security operations expertise.

Qualifications

• 3+ years in banking/fintech with incident escalation.
• 3+ years leading technical security teams.
• Experience building real-time SOC dashboards and wallboards.
• Experience managing external Tier 1 MSSP SLA and tuning alerts.
• Experience Tier 2 triage with incident responders on high-severity incidents.
• CISSP or GIAC certifications preferred.

Responsibilities

• Direct day-to-day security operations, technical triage, and detection engineering in the SOC.
• Oversee internal SOC L2 analysts and MSSP coordination to ensure SLA compliance.
• Maintain and display daily SOC wallboard statistics, tooling health, and alert metrics (MTTA, MTTD, MTTR).
• Lead containment measures during active intrusions (host isolation, NAC actions, identity suspension).
• Escalate cyber incidents to incident responders and support containment actions.
• Maintain SOC playbooks tailored to banking threat vectors and govern service delivery with MSSP reviews.

Skills

Security leadership

SOC monitoring dashboards

Incident escalation

Vendor management

Communication

Tools

SIEM

EDR

NAC

MSSP

Job description

Hong Leong Bank is seeking a SOC Manager / Lead to direct day-to-day security operations, triage, and detection engineering. You will oversee an internal Tier 2 security team and coordinate with an external MSSP to ensure SLA compliance and effective incident response.

You will curate and display real-time SOC dashboards, monitor tooling health, and maintain playbooks tailored to banking threats. This role demands strong leadership and deep security operations expertise.