Job Description

Overview:

We are seeking an experienced

IT Security Lead

to direct and enhance our security operations and incident response capabilities. Reporting to the

VP of IT Security

, this hands-on leadership role focuses on strengthening the organization's security posture through continuous improvement, proactive threat management, and effective team guidance. The ideal candidate will have a strong background in cloud and IT infrastructure security, incident response, and security operations management.

Key Responsibilities:

Incident Response & Threat Management

Lead all phases of the incident response lifecycle for major security events -- from detection and analysis to containment, eradication, and recovery. Act as the primary escalation point for significant security incidents, providing expert technical direction and coordinating cross-functional response activities. Conduct thorough post-incident reviews to identify root causes, document lessons learned, and drive corrective actions to prevent recurrence. Proactively hunt for threats and enhance detection capabilities by refining alerts, rules, and response playbooks within the SIEM platform.

Security Operations & Continuous Improvement

Continuously optimize existing security tools, including SIEM (e.g., Rapid7 InsightIDR), endpoint protection, and vulnerability management platforms (e.g., Rapid7 InsightVM). Collaborate with Security Engineers, IT, and Development teams to prioritize vulnerabilities, drive remediation, and report on risk reduction metrics. Strengthen the organization's cloud security posture by implementing and enhancing native security controls and CSPM tools (e.g., Rapid7 InsightCloudSec, AWS). Provide mentorship and technical guidance to team members, fostering growth in security best practices, tool usage, and professional development.

Desired Skills & Experience:

Hands-on experience monitoring alerts, managing complex incidents, and coordinating with Managed Detection and Response (MDR) teams. Strong understanding of industry frameworks and standards (NIST, OWASP, SANS). Proven ability to manage and optimize a modern security technology stack (SIEM, EDR, vulnerability management, and cloud security tools). Experience with Microsoft security tools such as Defender, Sentinel, Entra ID, and Intune. Deep expertise in cloud security principles and best practices for AWS and Microsoft 365 environments. Excellent leadership, analytical, and communication skills with a proactive, results-driven mindset. Minimum of

6 years of experience

in IT security, including demonstrated success leading security operations and incident response functions.
Job Type: Full-time

Pay: RM13,000.00 - RM14,000.00 per month

Benefits:

Health insurance Maternity leave Opportunities for promotion Professional development
Work Location: In person