The Challenge We Pose to You:
- Lead, supervise, and develop Tier 1 SOC engineers with shift-based leadership, providing day-to-day direction to ensure effective security monitoring of MSS customer environments.
- Ensure 24/7 SOC service coverage for MSS customers through effective shift planning, workforce scheduling, and resource allocation of Tier 1 engineers.
- Conduct regular performance evaluations and coaching sessions for Tier 1 engineers, and identify training needs to maintain the technical expertise required to serve MSS customers.
- Oversee the Tier 1 incident triage process, ensuring alerts are properly investigated, documented, and escalated in accordance with contracted SLAs.
- Own and maintain all Tier 1 SOPs, runbooks, and escalation matrices to ensure consistent and accurate handling of security events.
- Monitor the quality of incident tickets, investigation notes, and customer communications produced by Tier 1 engineers to maintain service standards.
- Act as the primary technical escalation point for complex security events that exceed Tier 1 engineer capability.
- Ensure SOC technologies (SIEM, SOAR, EDR) are properly operated by Tier 1 engineers, with accurate log ingestion, alert triage, and tool utilization.
- Drive automation initiatives to reduce alert fatigue and improve detection accuracy for Tier 1 engineers.
- Provide hands-on technical mentorship to Tier 1 engineers on threat detection, investigation techniques, and security tooling.
- Chair post-incident reviews (PIRs) at the Tier 1 level to capture lessons learned and improve response playbooks.
- Collaborate with Tier 2, Tier 3, and threat intelligence teams to translate new threat findings into updated detection procedures for the Tier 1 team.
- Handle ad hoc projects as assigned.
What You Bring to Us:
- Degree in Information Technology /Computer Science /Computer Engineering or related
- Information Security Certification (i.e. CISSP or CISA or GIAC)
- Have more than 8 years experiences in IT industry, understanding the role and responsibility for different teams
- Strong technical background, including networking, cloud, operating system, database and programming
- Have knowledge of quality of services, like ISO, Six Sigma, ITIL
- Have knowledge of project management, like PMBOK, Agile
- Good presentation skills
- Fluent in Putonghua & English
- Shift duty is required for supporting the operation
Our Offer:
5-day work, 16 days annual leave, a competitive remuneration package, comprehensive medical and dental plan, local and regional training and rewarding career opportunities.
Please send your complete resume, inclusive of your available date, current and expected salary by clicking 'Apply Now' .
All information received will be kept in strict confidence and for employment-related purpose only.