{"id":3315138,"url":"https://alion.io/job/maybank-lead-security-engineer-siem-i-it-security","title":"Lead Security Engineer (SIEM) I IT Security","company":{"id":207,"name":"Maybank","domain":"maybank.com","url":"https://alion.io/company/maybank","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kuala Lumpur, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18500,"max_usd":49000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":753},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-27T04:58:00Z","employer_posted_date":null,"last_verified_at":"2026-10-27T04:58:00Z","board_verified":false,"closed_at":null,"days_open":4,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":4},"description":"Job Purposes \nLead the overall architecture, engineering roadmap, and continuous improvement of the enterprise SIEM platform.\nDefine SIEM engineering standards, governance frameworks, operating models, and best practices across the organisation.\nServe as the primary technical authority and escalation point for all SIEM engineering-related matters.\nProvide strategic recommendations on platform scalability, modernization, optimization, and future-state capabilities.\nDrive collaboration across SOC, Incident Response, Threat Intelligence, Cloud, Infrastructure, and Application teams.\n\nJob Responsibilities\nArchitect, build, and operate large-scale SIEM platforms across on-premises, cloud, and hybrid environments with high availability, reliability, performance, and cost efficiency.\nLead the design, implementation, and maintenance of SIEM infrastructure components.\nOwn capacity planning, EPS/TPS modelling, storage optimization, compute utilization, search concurrency, workload management, and licensing optimization.\nDrive platform performance tuning initiatives to ensure operational excellence and service stability.\nLead onboarding of enterprise log sources, including endpoint, network, cloud, identity, SaaS, and custom applications.\nChampion automation and engineering efficiency through Infrastructure as Code (IaC), CI/CD pipelines, configuration management, and content version control.\nLead SIEM deployment, upgrade, and configuration automation initiatives.\nEstablish repeatable engineering practices that improve platform reliability, consistency, and operational efficiency.\nLead the design, review, and optimization of high-fidelity detection use cases aligned with the MITRE ATT&CK framework.\nTranslate evolving threat scenarios, adversary tactics, techniques, and procedures (TTPs) into scalable and effective detection capabilities.\nOversee detection tuning activities to improve detection accuracy, reduce false positives, and optimize SOC analyst workload.\nPartner with SOC and Incident Response teams to enhance alert quality, investigation workflows, and response effectiveness.\nEnsure SIEM content and data sources are aligned with operational security and incident response requirements.\nSupport threat hunting initiatives by enabling efficient search, analytics, and data visibility capabilities.\nAct as the senior escalation point during SIEM platform incidents, outages, and major service disruptions.\nLead root cause analysis and remediation efforts involving complex issues across operating systems, databases, networks, storage, queries, and data pipelines.\nProvide technical leadership during major cybersecurity incidents and post-incident reviews.\nDrive continuous improvement initiatives based on lessons learned and operational insights.\nProvide technical leadership, coaching, and mentorship to SIEM Engineers, Detection Engineers, and junior security team members.\nConduct knowledge-sharing sessions and establish engineering excellence within the team.\nReview engineering designs, detection content, and platform changes to ensure adherence to standards and best practices.\nFoster a culture of continuous learning, innovation, and operational excellence.\n\nJob Requirements\n8+ years of hands-on experience in security engineering, SIEM engineering, or large-scale security monitoring platforms (on-prem, cloud or hybrid).\nProven experience supporting 24x7 SOC environments and high-volume log ingestion.\nDemonstrated ownership of SIEM architecture, performance tuning, and detection engineering.\nSIEM Platform Expertise – Deep hands-on experience designing, operating, and optimizing enterprise SIEM platforms, including architecture, performance tuning, and capacity planning.\nSecurity Detection & SOC Knowledge – Strong understanding of SOC operations, incident response workflows, and the ability to design and tune effective, high fidelity security detections.\nSystems, Cloud & Infrastructure Skills – Solid foundation in Linux, networking, and cloud platforms, with experience integrating and managing security telemetry across hybrid environments.\nAutomation & Engineering Discipline – Proficiency in scripting and automation to standardize SIEM deployments, content management, and operational processes.\nAdvanced Troubleshooting & Problem Solving – Ability to diagnose and resolve complex, multi-layer technical issues under pressure in mission-critical environments.\nTechnical Leadership & Collaboration – Acts as a technical authority, mentors engineers, and collaborates effectively across SOC, cloud, and infrastructure teams to deliver secure outcomes.","description_format":"text","description_chars":4610,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","Property & Casualty Insurance","Asset Management & Funds","Investment Banking & M&A Advisory"],"lifecycle":[{"event":"open","at":"2026-10-27T04:58:00Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.897,"p_room":1,"age_days":4,"expected_fill_days":28,"reasons":["seen:4","velocity","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/maybank-lead-security-engineer-siem-i-it-security","json_url":"https://alion.io/job/maybank-lead-security-engineer-siem-i-it-security.json","meta":{"generated_at":"2026-10-31T23:32:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":36804,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":207},"rest":"https://alion.io/mcp/rest/get_company?id=207"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmaybank-lead-security-engineer-siem-i-it-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmaybank-lead-security-engineer-siem-i-it-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmaybank-lead-security-engineer-siem-i-it-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/maybank-lead-security-engineer-siem-i-it-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmaybank-lead-security-engineer-siem-i-it-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3315138}},{"tool":"search_jobs","arguments":{"company":"maybank.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3315138},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}