[LTA-ITCD] LEAD /PRINCIPAL CYBER ENGINEER (SOC PRODUCT LEAD)
Core
Strategic owner of the Cybersecurity Operations Centre's detection and monitoring capabilities, bridging business risk and the threat landscape to define a prioritized roadmap for the SOC product.
Role type
Principal Cyber Engineer (SOC Product Lead)
Builds
SOC detection use cases, automation workflows, tooling enhancements, and analyst enablement initiatives.
Domain
Cybersecurity Operations Centre (SOC), Threat Intelligence, Security Product Management
Required skills
Security monitoring and detection operations, MITRE ATT&CK framework, SIEM platforms (Microsoft Sentinel), SOAR, EDR, threat intelligence platforms, cloud security monitoring (Azure/AWS), stakeholder management, roadmap ownership, vendor management, budget accountability, KPI definition, compliance alignment (MAS TRM, ISO 27001, NIST CSF)
Preferred skills
Computer Science or related technical discipline, experience in regulated financial services/critical infrastructure/government SOC environments
Technologies
Microsoft Sentinel, SOAR, EDR, SIEM, Azure, AWS
Responsibilities
Define and refine the SOC capability roadmap and backlog; translate business risk into actionable requirements; conduct threat landscape assessments and prioritize detection use cases; lead vendor evaluations and manage the SOC technology portfolio; define and report on SOC KPIs and operational metrics; ensure compliance with regulatory frameworks.
Seniority
Principal, strategic owner & mentorship