Security Operations Center Lead

Intel Corporation

. Lead daily SOC operations across monitoring, alert triage, investigation, escalation, incident response coordination, and operational handoff across global time zones .

Posted 9/15/2026full-timePenang • MalaysiaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading SOC operations, incident response coordination, and security monitoring across various platforms. Proficient in developing and maturing SOC procedures, metrics, and detection use cases aligned with enterprise risks and compliance standards.

Highest-signal resume keywords

SOC Operations LeadershipIncident Response CoordinationSIEM and SOAR ManagementDetection Use Case DevelopmentCybersecurity Framework Familiarity

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseThreat DetectionSecurity OperationsAlert TriageVulnerability ManagementData Quality ImprovementDetection EngineeringCloud Security MonitoringPhishing InvestigationMITRE ATT&CK Familiarity

Soft Skills

Analytical SkillsDocumentation SkillsDecision-Making SkillsCommunication SkillsPrioritization Skills

Tools & Technologies

SIEMSOAREDR/XDRMicrosoft SentinelMicrosoft Defender XDRKQLUEBACloud Security PlatformsThreat Intelligence SourcesAutomation Workflows

Certifications & Qualifications

CISSPSecurity+CEH

Industry Keywords

CybersecuritySOCIncident ResponseCloud SecurityNIST CSFISO 27001CIS ControlsManaged Security ServicesPurple-Team CollaborationGenAI-assisted Workflows

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact

Lead daily SOC operations across monitoring, alert triage, investigation, escalation, incident response coordination, and operational handoff across global time zones
Own and mature SOC operating procedures, including incident intake, severity classification, escalation paths, response playbooks, major incident communications, and post-incident reviews
Manage and improve security monitoring across SIEM, SOAR, EDR/XDR, email security, cloud security, identity security, vulnerability signals, network telemetry, and threat intelligence sources
Build, tune, and continuously improve detection use cases aligned to enterprise risks, MITRE ATT&CK techniques, threat intelligence, audit findings, and business-critical assets
Partner with security engineering teams to improve log onboarding, data quality, telemetry coverage, alert fidelity, automation, and response integrations
Lead incident response coordination for endpoint compromise, identity misuse, phishing, malware, data loss indicators, cloud misconfigurations, suspicious network activity, and unauthorized access attempts
Establish SOC performance metrics and reporting, including alert volumes, false-positive rates, SLA adherence, escalation quality, MTTD, MTTA, MTTC, and incident trends
Oversee SOC analyst workflows, shift handoffs, case documentation, evidence handling, and quality assurance reviews
Coordinate with managed security service providers, internal IT teams, and business stakeholders on timely response and remediation ownership
Support implementation and operationalization of SOAR playbooks, automation workflows, enrichment logic, and incident response runbooks
Drive continuous improvement through tabletop exercises, incident retrospectives, purple-team findings, threat hunting outputs, and lessons learned
Maintain alignment with security governance, regulatory, privacy, and audit requirements
Serve as security operations lead for global SOC coverage and cross-functional collaboration

Requirements

What you’ll need

Bachelor’s degree in Computer Science, Computer Engineering, Information Security, Cybersecurity, or a related field, or equivalent practical experience
5+ years of progressive cybersecurity experience, including significant hands-on experience in security operations, incident response, threat detection, or SOC leadership
3+ years of experience leading SOC analysts, incident response teams, managed security operations, or cross-functional cyber defense workflows
Strong working knowledge of SIEM, SOAR, EDR/XDR, cloud security monitoring, identity security, email security, network security, and incident response processes
Demonstrated experience building or improving detection use cases, alert triage workflows, response playbooks, escalation procedures, and SOC metrics
Experience coordinating investigations involving phishing, malware, endpoint compromise, suspicious authentication, privileged access misuse, data exposure, and cloud security events
Familiarity with MITRE ATT&CK, NIST CSF, NIST SP 800-61, ISO 27001, CIS Controls, or equivalent cyber defense frameworks
Ability to communicate clearly with technical teams, business stakeholders, senior leadership, and external partners during security incidents
Strong analytical, documentation, prioritization, and decision-making skills in high-pressure operational environments
CISSP, Security+, or equivalent industry certification
Preferred: experience operating or transforming a global SOC in an enterprise environment
Preferred: experience as an Incident Commander leading IR execution
Preferred: experience with Microsoft Sentinel, Microsoft Defender XDR, KQLs, UEBA, or comparable security operations platforms
Preferred: experience with Azure, AWS, GCP, or hybrid cloud security monitoring
Preferred: experience with threat hunting, purple-team collaboration, adversary emulation, or detection engineering
Preferred: experience managing managed detection and response providers or outsourced SOC services
Preferred: experience in semiconductor, technology, manufacturing, or intellectual property-intensive environments
Preferred: familiarity with GenAI-assisted SOC workflows
Preferred: additional certifications such as CEH or similar

Benefits

Comp & perks

🌐 Worldwide ❌ Jobs You've Hidden ⭐️ Saved Jobs ✅ Applied Jobs ✉️ Email Alerts 👤 Account Intel Corporation Website LinkedIn All Job Openings 10,000+ employees Founded 1968 🏭 Manufacturing 💼 Consulting 📦 Logistics Manufacturing
Consulting
Logistics Intel Corporation is a leading technology company that specializes in manufacturing and selling a variety of hardware and software products. Its offerings include processors such as Intel Core, Intel Xeon, and Intel Atom, as well as discrete graphics, AI accelerators, silicon photonics, and embedded solutions. Intel serves various industries with its networking, storage solutions, and developer resources, focusing heavily on AI and performance-driven technologies. The company plays a significant role in advancing computing experiences across PCs, data centers, cloud, edge, and 5G networks. Intel is committed to delivering high performance and secure technologies while fostering innovation through its expansive partner ecosystem and development tools. Security Operations Center Lead Job not on LinkedIn 🔥 1 hour ago 🏢 Penang – Onsite ⏰ Full Time 🟠 Senior 🛡️ Security Operations 👻 Ghost score 10% Apply Now Customize resume + cover letter Report problem ☆ Save ☑️ Mark as applied ❌ Hide 📋 Description
Lead daily SOC operations across monitoring, alert triage, investigation, escalation, incident response coordination, and operational handoff across global time zones
Own and mature SOC operating procedures, including incident intake, severity classification, escalation paths, response playbooks, major incident communications, and post-incident reviews
Manage and improve security monitoring across SIEM, SOAR, EDR/XDR, email security, cloud security, identity security, vulnerability signals, network telemetry, and threat intelligence sources
Build, tune, and continuously improve detection use cases aligned to enterprise risks, MITRE ATT&CK techniques, threat intelligence, audit findings, and business-critical assets
Partner with security engineering teams to improve log onboarding, data quality, telemetry coverage, alert fidelity, automation, and response integrations
Lead incident response coordination for endpoint compromise, identity misuse, phishing, malware, data loss indicators, cloud misconfigurations, suspicious network activity, and unauthorized access attempts
Establish SOC performance metrics and reporting, including alert volumes, false-positive rates, SLA adherence, escalation quality, MTTD, MTTA, MTTC, and incident trends
Oversee SOC analyst workflows, shift handoffs, case documentation, evidence handling, and quality assurance reviews
Coordinate with managed security service providers, internal IT teams, and business stakeholders on timely response and remediation ownership
Support implementation and operationalization of SOAR playbooks, automation workflows, enrichment logic, and incident response runbooks
Drive continuous improvement through tabletop exercises, incident retrospectives, purple-team findings, threat hunting outputs, and lessons learned
Maintain alignment with security governance, regulatory, privacy, and audit requirements
Serve as security operations lead for global SOC coverage and cross-functional collaboration 🎯 Requirements
Bachelor’s degree in Computer Science, Computer Engineering, Information Security, Cybersecurity, or a related field, or equivalent practical experience
5+ years of progressive cybersecurity experience, including significant hands-on experience in security operations, incident response, threat detection, or SOC leadership
3+ years of experience leading SOC analysts, incident response teams, managed security operations, or cross-functional cyber defense workflows
Strong working knowledge of SIEM, SOAR, EDR/XDR, cloud security monitoring, identity security, email security, network security, and incident response processes
Demonstrated experience building or improving detection use cases, alert triage workflows, response playbooks, escalation procedures, and SOC metrics
Experience coordinating investigations involving phishing, malware, endpoint compromise, suspicious authentication, privileged access misuse, data exposure, and cloud security events
Familiarity with MITRE ATT&CK, NIST CSF, NIST SP 800-61, ISO 27001, CIS Controls, or equivalent cyber defense frameworks
Ability to communicate clearly with technical teams, business stakeholders, senior leadership, and external partners during security incidents
Strong analytical, documentation, prioritization, and decision-making skills in high-pressure operational environments
CISSP, Security+, or equivalent industry certification
Preferred: experience operating or transforming a global SOC in an enterprise environment
Preferred: experience as an Incident Commander leading IR execution
Preferred: experience with Microsoft Sentinel, Microsoft Defender XDR, KQLs, UEBA, or comparable security operations platforms
Preferred: experience with Azure, AWS, GCP, or hybrid cloud security monitoring
Preferred: experience with threat hunting, purple-team collaboration, adversary emulation, or detection engineering
Preferred: experience managing managed detection and response providers or outsourced SOC services
Preferred: experience in semiconductor, technology, manufacturing, or intellectual property-intensive environments
Preferred: familiarity with GenAI-assisted SOC workflows
Preferred: additional certifications such as CEH or similar Apply Now 📊 Check your resume score for this job Improve your chances of getting an interview by checking your resume score before you apply. Check Resume Score View More Security Operations Engineer Jobs 🌐 Worldwide Built by Lior Neu-ner. I'd love to hear your feedback — Get in touch via DM or support@remoterocketship.com Search Remote jobs Search Jobs by country Search jobs by city Search jobs by job title Search entry-level jobs Search junior-level jobs Search senior-level jobs Search jobs by tech stack Search jobs by contract type Search remote internships Search remote part-time jobs Remote jobs Anywhere in the World Companies Hiring Anywhere in the World Companies Hiring Sales People Anywhere in the World Companies Hiring Software Engineers Anywhere in the World Resources About us Advice Tips for finding remote jobs Interview questions and answers Resume examples Cover letter examples Post a job Affiliates Is Remote Rocketship legit? Privacy policy Terms of service Job board SEO course Remote Job Search MasterClass Resume Review AI Apply Copilot OpenClaw job finder API docs Find jobs using your resume Jobs by Country Remote jobs anywhere in the world (Worldwide remote jobs) Remote jobs United States Remote jobs Australia Remote jobs Brazil Remote jobs Canada Remote jobs France Remote jobs Ireland Remote jobs Germany Remote jobs Netherlands Remote jobs Spain Remote jobs UK Popular Jobs Remote data analyst jobs Remote customer support jobs Remote executive assistant jobs Remote marketing jobs Remote product designer jobs Remote product manager jobs Remote project manager jobs Remote recruiter jobs Remote sales jobs Remote software engineer jobs Jobs by Type Remote full-time jobs Remote part-time jobs Remote contract jobs Remote internship jobs Remote entry-level jobs Remote jobs with no experience required Remote junior jobs (1-3 years of experience) Digital nomad jobs Remote jobs with no degree required Freelance remote jobs Temporary remote jobs Remote jobs hiring now Stay at home mom jobs