Full Time Security Operation Centre (SOC) Team Lead Jobs, in MBSB Bank Berhad Selangor - Maukerja

Job Purpose

To lead and coordinate Security Operations Centre (SOC) activities, ensuring continuous monitoring, investigation, and response to cybersecurity threats across the Bank's technology environment. This role will act as the primary operational lead during assigned shifts, providing technical guidance to SOC analysts while coordinating incident response, threat hunting, security monitoring, and stakeholder communication. The successful candidate will play a key role in strengthening the Bank's cyber defense capabilities by ensuring security alerts are effectively managed, incidents are escalated promptly, and monitoring platforms operate efficiently.

Key Responsibilities

Security Monitoring & Incident Management

• Lead and coordinate security monitoring activities during assigned shifts.
• Monitor, analyse and investigate security alerts generated from SIEM, EDR/XDR, NDR, WAF, IPS, DLP, email security and other security platforms.
• Validate, classify, document and escalate security alerts based on approved severity levels and service level requirements.
• Ensure critical and high-risk security events are promptly investigated and escalated.
• Coordinate initial incident investigation, containment and escalation activities.
• Provide technical guidance to analysts during complex investigations and incident response activities.
• Coordinate with internal teams, business stakeholders and vendors during security incidents.
• Maintain accurate incident records, evidence, timelines and investigation documentation.

Threat Intelligence & Threat Hunting

• Review threat intelligence received from regulators, industry sources and security vendors.
• Assess emerging cyber threats and their potential impact to the organization.
• Conduct proactive threat hunting activities using indicators of compromise (IOCs), security intelligence and behavioural analysis.
• Identify malicious activities such as phishing, malware infections, account compromise, intrusion attempts, data leakage and cyber-attacks.
• Document threat hunting findings and recommend remediation actions.
• Support investigation of exposed credentials, dark web findings and other external cyber threats.

Detection Engineering & Continuous Improvement

• Support development, testing and tuning of SIEM correlation rules and security use cases.
• Review false positives, recurring alerts and monitoring gaps to improve detection effectiveness.
• Assist in onboarding and validation of security logs and monitoring sources.
• Maintain and enhance SOC playbooks, investigation procedures and response processes.
• Recommend improvements to SOC monitoring coverage, operational processes and incident response capabilities.

Reporting, Governance & Compliance

• Prepare daily shift reports covering alerts, incidents, outstanding actions and platform health.
• Support weekly and monthly cybersecurity operational reporting.
• Assist with cybersecurity audits, regulatory reviews and compliance activities.
• Maintain SOC documentation, procedures and operational records.
• Participate in cyber drills, tabletop exercises and security simulation activities.

Team Leadership & Stakeholder Management

• Provide coaching, technical guidance and knowledge sharing to SOC analysts.
• Review investigation quality, incident documentation and reporting deliverables.
• Ensure compliance with SOC procedures, escalation requirements and service levels.
• Facilitate effective communication between SOC teams, IT operations, business stakeholders and external service providers.
• Escalate operational, resource or performance concerns to management where required.

Requirements

• Bachelor's Degree, Advanced Diploma or Diploma in Cyber Security, Information Technology, Computer Science or related disciplines.
• Minimum 3-5 years of experience in Cybersecurity, Security Operations Centre (SOC), Security Monitoring or Incident Response.
• Experience as a Senior SOC Analyst or Team Lead role would be an added advantage.
• Hands-on experience with security monitoring, threat hunting, incident response and cyber investigations.
• Experience working with technologies such as SIEM platforms, EDR/XDR solutions, NDR solutions, WAF, IPS and DLP technologies, Email and Web Security platforms
• Strong understanding of cybersecurity threats, attack techniques and incident response methodologies.
• Experience in log analysis, alert triage and investigation of security events.
• Knowledge of cybersecurity frameworks, controls and best practices.
• Relevant certifications such as CompTIA Security+, CySA+, CEH, GCIH or equivalent would be an added advantage.
• Experience in banking, financial services or regulated industries would be preferred.
• Strong analytical, problem-solving and decision-making skills.
• Excellent stakeholder management, communication and reporting skills.
• Ability to work in a rotating shift environment, including weekends and public holidays when required.