SOC Team Lead

Hytech; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Public transit access

Corporate insurance (dental, optical)

Gym and fitness claims

Training & development

Career growth projects

Job summary

Hytech is seeking a SOC Team Lead in Kuala Lumpur to oversee a security operations center, mentor engineers, and drive incident response, threat hunting, and tool strategy. You will communicate risks to leadership while maturing playbooks and runbooks in a fast-paced consultancy environment.

The role requires hands-on security expertise, strong leadership, and the ability to translate technical issues into business impact.

Qualifications

• Minimum 3–5 years in a SOC; 1–2 years in a lead role
• Proven leadership and mentoring capabilities
• Strong incident response and digital forensics expertise
• Breadth of security tools and network understanding
• Excellent communication to technical and non-technical stakeholders
• Proactive, strategic security mindset

Responsibilities

• Lead, mentor, and develop a SOC team; conduct performance reviews
• Oversee end-to-end incident response; act as primary decision-maker
• Manage daily SOC operations; ensure SLAs and backlogs are addressed
• Own creation and evolution of SOC SOPs and playbooks
• Lead evaluation and deployment of security technologies (SIEM, XDR, SOAR)
• Guide threat intelligence and hunting activities to pre-empt incidents
• Report SOC metrics and security posture to management
• Oversee creation and tuning of use cases to reduce false positives

Skills

SOC leadership

Incident response

Threat hunting

Log analysis

Team management

Communication

Tools

SIEM

XDR

EDR

SOAR

Firewalls

Job description

Hytech is a leading management consulting firm headquartered in Australia and Singapore, specialising in digital transformation for fintech and financial services organisations. We deliver end-to-end consulting services and provide robust middle- and back-office solutions that enable our clients to optimise operations, enhance efficiency, and stay ahead in a fast-evolving digital landscape.

With more than 2,000 professionals worldwide, Hytech has a strong and growing international presence, with offices across Australia, Singapore, Malaysia, Taiwan, the Philippines, Thailand, Morocco, Cyprus, Dubai, and beyond.

About the Role:

As aSOC Team Lead, you will be responsible for leading a team of security analysts and engineers, overseeing the daily operations of the Security Operations Center (SOC). You will play a crucial role in maturing our security incident response process, managing security infrastructure strategy, and acting as the primary escalation point for complex security threats. This role requires a blend of deep technical expertise, people management skills, and the ability to translate technical risks into business impact.

Job Responsibilities:

• Team Leadership & Mentorship:Lead, mentor, and develop a team of SOC engineers/analysts, conducting performance reviews, identifying training needs, and fostering a culture of continuous learning.
• Incident Management:Oversee the end-to-end incident response process, acting as the primary decision-maker and coordinator during high-severity security incidents.
• Operational Excellence:Manage the daily operations of the SOC, ensuring SLAs are met, backlogs are managed, and processes are running efficiently.
• Process Maturation:Own the creation, review, and enhancement of the full suite of cybersecurity SOPs and playbooks, ensuring they remain effective and current.
• Tooling & Strategy:Lead the evaluation, implementation, and optimization of security technologies (SIEM, XDR, SOAR, etc.), including managing POCs for new security products and driving automation initiatives.
• Threat Intelligence & Hunting:Guide the team’s threat intelligence efforts and proactive threat hunting exercises to identify and mitigate emerging risks before they become incidents.
• Stakeholder Communication:Report on SOC metrics, incident trends, and security posture to management and stakeholders, translating technical findings into clear, actionable insights.
• Use Case Management:Oversee the creation and tuning of security use cases to reduce false positives and improve detection capabilities.

Job Requirements:

• Experience:Minimum 3-5 years of experience in a SOC environment, with at least 1-2 years in a team lead or senior supervisory role.
• Leadership:Proven experience leading, training, and developing technical security teams.
• Incident Response:Deep expertise in leading complex incident response investigations, root cause analysis, and digital forensics.
• Technical Breadth:
• Advanced knowledge of SIEM, XDR, EDR, Anti-Malware, and Email Security technologies.
• Strong understanding of networking (Firewalls, IDS/IPS, VPN, WAF) and core infrastructure (Active Directory, Databases, Cloud).
• Proficiency in log analysis and correlation across diverse data sources.
• Process Oriented:Experience developing and refining SOC processes, runbooks, and playbooks.
• Communication:Excellent verbal and written communication skills, with the ability to convey technical risks to non-technical leadership.
• Mindset:Proactive, strategic thinker who is passionate about staying ahead of the threat landscape.

Good to Have:

• Automation & Scripting:Experience leading automation efforts using Python, PowerShell, or Bash to streamline SOC workflows.
• Cloud Security:Hands-on experience with cloud security monitoring (AWS, Azure, or GCP) and related services (e.g., GuardDuty, CloudTrail).
• Frameworks & Standards:Strong working knowledge of industry frameworks such as MITRE ATT&CK, NIST Cybersecurity Framework, ISO 27001, and PCI DSS.
• Advanced Certifications:Possession of advanced security certifications such as CISSP, CISM, GIAC (GCIH, GCFA, GMON), or equivalent.
• SOAR Experience:Experience with Security Orchestration, Automation, and Response (SOAR) platforms.

What We Offer

• Easy access to public transportation (LRT & KTM).
• Corporate insurance coverage, including dental, optical, and outpatient claims.
• Gym and fitness claims.
• Ongoing training and development opportunities.
• Exposure to exciting projects that support career growth and professional development.