Security Operations Center Lead

About the role

The Security Operations Center Lead drives global SOC operations across Penang and Bengaluru, focusing on incident response, threat detection, and operational maturity. This role involves managing daily monitoring, tuning detection use cases, and leading cross-functional collaboration to ensure robust cyber defense. The position requires a hybrid or on-site presence in the specified locations to oversee shift-based security activities.

What you’ll do

• Lead daily SOC operations including monitoring, alert triage, investigation, and incident response coordination
• Own and mature SOC operating procedures, escalation paths, and post-incident reviews
• Manage and improve security monitoring across SIEM, SOAR, EDR/XDR, and telemetry sources
• Build and tune detection use cases aligned to enterprise risks and MITRE ATT&CK techniques
• Partner with security engineering to improve log onboarding, data quality, and automation
• Lead incident response coordination for endpoint compromise, identity misuse, and phishing events
• Establish SOC performance metrics, reporting, and SLA adherence tracking
• Oversee analyst workflows, shift handoffs, case documentation, and quality assurance

What you’ll bring

• Bachelor’s degree in CS, Engineering, InfoSec, Cybersecurity, or equivalent experience
• 5+ years progressive cybersecurity experience with hands-on SOC leadership
• 3+ years experience leading SOC analysts or incident response teams
• Strong knowledge of SIEM, SOAR, EDR/XDR, cloud, identity, and email security
• Experience building detection use cases, alert triage workflows, and response playbooks
• Familiarity with MITRE ATT&CK, NIST CSF, ISO 27001, or CIS Controls
• CISSP, Security+, or equivalent industry certification

Skills

Education

Bachelor’s degree in Computer Science, Computer Engineering, Information Security, Cybersecurity, or a related field, or equivalent practical experience.