SOC Team Lead: Incident Response & Security Operations

Hytech; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Benefits offered by this job

Public transit access

Corporate insurance (dental, optical)

Gym and fitness claims

Training & development

Career growth projects

Job summary

Hytech is seeking a SOC Team Lead in Kuala Lumpur to oversee a security operations center, mentor engineers, and drive incident response, threat hunting, and tool strategy. You will communicate risks to leadership while maturing playbooks and runbooks in a fast-paced consultancy environment.

The role requires hands-on security expertise, strong leadership, and the ability to translate technical issues into business impact.

Qualifications

• Minimum 3–5 years in a SOC; 1–2 years in a lead role
• Proven leadership and mentoring capabilities
• Strong incident response and digital forensics expertise
• Breadth of security tools and network understanding
• Excellent communication to technical and non-technical stakeholders
• Proactive, strategic security mindset

Responsibilities

• Lead, mentor, and develop a SOC team; conduct performance reviews
• Oversee end-to-end incident response; act as primary decision-maker
• Manage daily SOC operations; ensure SLAs and backlogs are addressed
• Own creation and evolution of SOC SOPs and playbooks
• Lead evaluation and deployment of security technologies (SIEM, XDR, SOAR)
• Guide threat intelligence and hunting activities to pre-empt incidents
• Report SOC metrics and security posture to management
• Oversee creation and tuning of use cases to reduce false positives

Skills

SOC leadership

Incident response

Threat hunting

Log analysis

Team management

Communication

Tools

SIEM

XDR

EDR

SOAR

Firewalls

Job description

Hytech is seeking a SOC Team Lead in Kuala Lumpur to oversee a security operations center, mentor engineers, and drive incident response, threat hunting, and tool strategy. You will communicate risks to leadership while maturing playbooks and runbooks in a fast-paced consultancy environment.

The role requires hands-on security expertise, strong leadership, and the ability to translate technical issues into business impact.