Job Description

We are seeking an experienced IT Security Lead to help direct our security operations and incident response capabilities. Reporting to the VP of IT Security, this hands-on role is focused on maturing our security posture through continuous improvement. You will help lead the response to alerts and security incidents, help optimize our security tools and processes, and guide a team of security engineers to achieve operational excellence in protecting our cloud and IT infrastructure.

Key Responsibilities

Lead all phases of the incident response lifecycle for significant security events, from detection and analysis to containment and eradication. Serve as the primary escalation point for security incidents, providing expert technical guidance and coordinating cross-functional response efforts. Conduct post-incident reviews to identify root causes and drive the implementation of corrective actions to prevent recurrence. Proactively hunt for threats and mature the organization's detection capabilities by refining alerts and response playbooks within our SIEM system Security Operations & Continuous Improvement Continuously optimize and refine existing security tools, including our SIEM (Rapid7 InsightIDR), endpoint protection, and vulnerability management platforms (Rapid7 InsightVM) Assist Security Engineers, IT teams and Engineering in vulnerability management prioritizing and remediation efforts, and reporting on risk reduction Drive the continuous improvement of our cloud security posture by implementing and enhancing native cloud security controls and CSPM tools like Rapid7 InsightCloudSec and AWS Mentor security team members, providing guidance on security best practices, tool management, and professional development

Desired Skills & Experience

Hands-on experience monitoring alerts, working with managed detection response teams, and managing complex incidents Familiarity with industry frameworks like NIST, OWASP, and SANS. Ability to manage and optimize a modern security technology stack, including SIEM, EDR, vulnerability management, and cloud security tools Experience with Microsoft stack of tools, i.e., Defender, Sentinel, Entra ID, Intune Strong expertise in cloud security principles and best practices for major providers like AWS and Microsoft 365 A proactive, results-oriented team lead with excellent communication skills and a passion for mentoring technical teams A minimum of 6 years in IT security, with a proven track record of leading security operations and incident response functions
Job Types: Full-time, Permanent

Pay: RM9,000.00 - RM16,000.00 per month

Experience:

IT Security: 6 years (Required) IT Security Lead: 1 year (Preferred) SIEM: 3 years (Preferred) Rapid 7 InsightIDR: 3 years (Preferred) Rapid7 InsightVM: 3 years (Preferred) AWS cloud security: 3 years (Preferred)
Work Location: In person