At Sun Group, the Security Operations team is continuously enhancing its capabilities in monitoring, detecting and responding to threats across Sun Group's diverse technology ecosystem.
We are looking for a SOC Manager – someone with the ability to lead teams, set strategic direction and enhance Threat Detection, Incident Response & Security Automation capabilities across Sun Group's technology ecosystem.
KEY RESPONSIBILITIES
1. Strategic Direction & Enhancement of Security Operations Capabilities
- Plan and implement initiatives to enhance SOC, Threat Detection & Incident Response capabilities.
- Standardize Monitoring, Incident Response, Threat Hunting and Security Operations processes.
- Monitor Threat Landscape, assess gaps in defensive capabilities and propose improvement solutions.
2. Enhancement of Threat Detection Capabilities
- Guide the development and optimization of SIEM, Detection Use Case, Correlation Rule, Alert & Dashboard.
- Improve detection quality based on MITRE ATT&CK, Threat Intelligence and Security Telemetry.
- Coordinate with Security/Technology teams to expand data sources and enhance detection capabilities across Cloud, Network, Endpoint, Application.
3. Lead Incident Response & Threat Hunting
- Build and standardize IR Process, SOC Playbook, Runbook.
- Lead handling and coordination of Security Incidents of complex/high severity.
- Guide Threat Hunting activities, analyze TTPs, IoCs and Attack Paths to proactively detect threats.
- Organize Purple Team / Incident Simulation to assess and enhance defensive capabilities.
4. Automation & AI-driven Security Operations
- Promote Security Automation, SOAR to reduce processing time and improve operational efficiency.
- Research and apply AI/LLM to Monitoring, Alert Triage, Threat Hunting and Incident Response.
- Identify opportunities to automate repetitive processes and enhance team decision-making capabilities.
REQUIREMENTS:
- Bachelor's degree in Information Security, IT, Computer Science or equivalent.
- 7 years of experience in Cyber Security/Security Operations/SOC, with at least 2 years of experience leading or managing teams.
- Strong foundation in SIEM, Threat Detection, Incident Response, Threat Hunting.
- Experience with Elastic Stack (ELK) and/or equivalent SIEM platforms.
- Understanding of and experience with Cloud Security, preferably AWS and services such as CloudTrail, GuardDuty, Security Hub, CloudWatch, VPC Flow Logs.
- Experience building Detection Use Cases, Correlation Rules, Playbooks/Runbooks and handling real-world Security Incidents.
- Understanding of MITRE ATT&CK, Threat Intelligence, TTPs & IoCs.
- Automation-first, Data-driven & AI-ready mindset.
- Ability to lead teams, handle issues and coordinate with multiple technical groups.
- Preferred: CISSP / CISM / GCIH / GCIA / GCFA or equivalent Security Operations certifications.
BENEFITS
Competitive Compensation & Comprehensive Benefits
- Competitive salary based on capability
- Business performance and project performance bonuses
- Comprehensive benefits package covering finance, health, mental wellbeing and lifestyle
Long-term Development Policy
- Opportunities for advancement to management positions in Data & Digital Transformation
"Settle and Thrive" policy – opportunity to own a home after 10 years
Premium Healthcare
- Regular health check-ups at international standard hospital systems
- Comprehensive health insurance Sun Care
Ecosystem Privileges
- Discounts on travel, vacation, entertainment, dining and aviation within Sun Group ecosystem
- Accommodation support at Sunhome public housing system