SOC Team Lead

Pacific Comnet (M) Sdn Bhd

Kuala Lumpur

On-site

MYR 120,000 - 180,000

Full time

6 days ago

Be an early applicant

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Job summary

Pacific Comnet (Malaysia) Sdn Bhd is seeking a seasoned SOC professional to lead threat hunting across hybrid environments using SIEM, EDR, and NDR telemetry. The role emphasizes translating threat intel into detection rules and incident response, leveraging MITRE ATT&CK, and building targeted hunting campaigns.

The ideal candidate will design high-fidelity detection rules, craft use cases based on MITRE ATT&CK, reduce false positives, and engage customers with best-practice security guidance

Qualifications

Min. 5 years of relevant experience in SOC/MSSP environments with SIEM, SOAR platforms and EDR expertise.
Strong grasp of threat detection, Cyber TTPs, and frameworks like MITRE ATT&CK.
Familiarity with cloud platforms (AWS, Azure, GCP) and network security tools.
Familiarity with vulnerability management, and security configuration and automation.
Digital Forensics and Incident Response (DFIR) experience enabling deeper investigations and root cause analysis is an added advantage.
Ability to analyze security issues and recommend effective solutions.
Strong communication and interpersonal skills; able to work without supervision and take ownership.
Able to work shifts to support 24x7 SOC operations.
Candidates with more relevant experience will be considered for SOC Lead role.

Responsibilities

Proactively hunt for threats across hybrid environments using telemetry from SIEM, EDR, and NDR tools.
Analyze and operationalize threat intel to inform detection rules and incident response.
Leverage threat intelligence and MITRE frameworks to build and execute targeted hunting campaigns.
Design and fine-tune high-fidelity detection rules across SIEMs and EDR platforms.
Build custom use cases based on MITRE ATT&CK.
Eliminate false positives, improve alert accuracy, and continuously optimize detection logic.
Engage with customers to address cybersecurity queries, share best practices, and support compliance efforts.
Develop and maintain up-to-date technical sales collateral including solution briefs, architecture diagrams, and other documents.
Review and uplift MSSP capabilities in intrusion detection, threat hunting, and incident response.

Skills

Threat Hunting

Threat Detection

MITRE ATT&CK

Incident Response

Cyber TTPs

Communications

Tools

SIEM

EDR

SOAR

NDR

AWS

Azure

GCP

Job description

Proactively hunt for threats across hybrid environments using telemetry from SIEM, EDR, and NDR tools.
Analyze and operationalize threat intel to inform detection rules and incident response.
Leverage threat intelligence and MITRE frameworks to build and execute targeted hunting campaigns.

Detection Engineering

Design and fine-tune high-fidelity detection rules across SIEMs and EDR platforms.
Build custom use cases based on MITRE ATT&CK.
Eliminate false positives, improve alert accuracy, and continuously optimize detection logic.
Engage with customers to address cybersecurity queries, share best practices, and support compliance efforts.
Develop and maintain up-to-date technical sales collateral including solution briefs, architecture diagrams, and other documents.
Review, identify, address and uplift the capability of Managed Security Services when it comes to intrusion detection in depth, threat hunting, incident response management and digital

Job Requirements: (e.g., educational/ professional qualifications)

Min. 5 years of relevant experience in SOC/MSSP environments with SIEM, SOAR platforms and EDR expertise.
Strong grasp of threat detection, Cyber TTPs, and frameworks like MITRE ATT&CK
Familiarity with cloud platforms (AWS, Azure, GCP) and network security tools
Familiarity with vulnerability management, and security configuration and automation.
Digital Forensics and Incident Response (DFIR) experience enabling deeper investigations and root cause analysis is an added advantage.
Ability to analyze security issues and recommend effective solutions.
Strong communication and interpersonal skills
Resourceful, take initiatives and ownership at work, and ability to work without supervision, taking personal responsibilities and accountability
Able to work shift to support 24x7 SOC operations
Candidates with more relevant working experiences will be considered for SOC Lead role

Pacific Comnet (Malaysia) Sdn Bhd. (“Pacific Comnet”) is exclusively dedicated to the business market. We provide a comprehensive range of voice, data & ICT services to thousands of companies throughout Asia Pacific.

Pacific Comnet is a 100% subsidiary of CITIC Telecom International (SEA) Pte Ltd. Both entities are units within CITIC Telecom International (www.citictel.com), a member of CITIC Group. Established in 1999 and listed on Hong Kong Stock Exchange (HKSE:1883) in 2007, CITIC Telecom International is a member of the CITIC Pacific Group (www.citicpacific.com) in Hong Kong and the CITIC Group (www.citic.com) in China.

In our continual effort to signify our desire to work firmly with our partners and clients to meet their telecommunication needs, CITIC Telecom International has established a regional presence in South East Asia. We are committed to reinforce our presence in South East Asia in order to enhance our responsiveness to serve our clients proficiently and continue to extend superior telecommunication services to our clients.

Apart from commercial operations, it is our desire at Pacific Comnet to make a difference in the communities we serve. Our employees are dedicated to the enhancement of green-minded organizations while making a positive impact on the environment.

Get your free, confidential resume review.

or drag and drop your file here.