Job Title: SOC Manager
Location : Kuala Lumpur, Malaysia
#ECGS
EC-Council is the world’s largest cyber security technical certification body. We operate in 145 countries globally and we are the owner and developer of various world-famous cyber security programs. We are proud to have trained and certified over 400,000 information security professionals globally that have influenced the cyber security mindset of countless organizations worldwide.
Role Overview
The Cyber Security Assistant Manager supports the organization’s information security program by managing and operating key security platforms, investigating incidents, and driving vulnerability remediation and compliance. The role covers email security (Mimecast), vulnerability management (Qualys), endpoint protection (CrowdStrike Falcon), and infrastructure hardening across on-premises, cloud (AWS and Microsoft 365), and network environments. The role is both hands-on and coordinating. The Assistant Manager works day to day with IT teams, business units, auditors, and vendors, and turns technical findings into clear reports and recommendations for management.
Key Responsibilities
Email Security & Messaging Protection
- Administer and manage enterprise email security platforms, including Mimecast.
- Investigate email delivery issues, phishing attempts, spoofing incidents, and suspicious email activities.
- Manage SPF, DKIM, and DMARC configurations and compliance.
- Review, analyze, and implement email security policies, URL protection, attachment controls, and sender/domain allowlisting.
- Coordinate with internal stakeholders and external vendors to resolve email security incidents.
Vulnerability Management & Compliance
- Administer Qualys Vulnerability Management and Policy Compliance platforms.
- Plan, execute, and monitor vulnerability and compliance scans across servers, databases, cloud environments, and network devices.
- Develop and maintain security baselines aligned with CIS Benchmarks and industry best practices.
- Analyze scan findings, provide remediation recommendations, and track remediation progress.
- Prepare monthly security KPI/KRI and compliance reports for management and auditors.
Endpoint Security
- Manage CrowdStrike Falcon endpoint protection solutions.
- Investigate endpoint security alerts, suspicious activities, and malware-related incidents.
- Support endpoint containment, threat hunting, and incident response activities.
- Monitor endpoint security posture and coordinate remediation efforts.
Security Engineering & Infrastructure Security
- Develop and maintain security hardening standards for Windows Servers, Active Directory, databases, cloud workloads, and network devices.
- Support implementation of CIS Hardening standards and security configuration baselines.
- Review security configurations across Cisco, Palo Alto, FortiGate, Check Point, and IBM i/AS400 environments.
- Evaluate and recommend security improvements for infrastructure and cloud environments.
Security Operations & Incident Management
- Investigate and respond to cybersecurity incidents and operational security issues.
- Perform root cause analysis and document findings and corrective actions.
- Coordinate with business units, vendors, and support teams during incident resolution.
- Support security monitoring, threat analysis, and event investigation activities.
Governance, Risk & Audit Support
- Support internal and external audits by providing security evidence and technical documentation.
- Prepare responses related to security controls, compliance requirements, and audit findings.
- Maintain security documentation, procedures, standards, and operational runbooks.
- Participate in risk assessments and control reviews.
Reporting & Stakeholder Management
- Prepare executive summaries, management reports, and technical assessments.
- Present security findings, risks, and recommendations to management and stakeholders.
- Liaise with vendors including Mimecast, Qualys, CrowdStrike, Microsoft, and other technology providers.
- Provide technical guidance and support to business and IT teams.
Requirements and Qualifications
- Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Email Security: Mimecast, SPF, DKIM, DMARC
- Vulnerability Management: Qualys VMDR, Policy Compliance
- Endpoint Security: CrowdStrike Falcon
- Security Hardening: CIS Benchmarks
- Network Security: Cisco, Palo Alto, FortiGate, Check Point
- Strong analytical and problem-solving skills.
- Excellent communication and stakeholder management abilities.
- Experience working with auditors and regulatory requirements.
About Our Culture:
EC-Council is driven by a mission to strengthen global cybersecurity capability and advance the profession of ethical hacking and information security. Our teams operate across regions and cultures, united by integrity, professionalism, and a commitment to meaningful impact. Continuous learning and accountability are encouraged, empowering individuals to take ownership of their contributions. Respect, trust, and ethical conduct guide how we work with colleagues, partners, and the global cybersecurity community.
Additional Information:
EC-Council is an equal opportunity workplace and an affirmative action employer. We are committed to providing equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, or veteran status. We do not discriminate based on these or any other characteristics protected by applicable laws or regulations in the locations where we operate.
EC-Council is dedicated to working with and providing reasonable accommodations to individuals with disabilities. If you have a medical condition or disability that limits your ability to complete any part of the application process and require reasonable accommodation, please contact us at
ecchr@eccouncil.org and let us know how we can assist.
To be eligible for this position, candidates must be able to provide proof that they are either a citizen of the country or have legal authorization to work in the country where the position is posted and are currently residing there. EC-Council does not offer employment to ineligible candidates and reserves the right to revoke employment in case the candidate loses the authorization to work.
If, as part of the recruitment process, you are required to complete or submit any form of work, project, case study, or assignment, please note that such material will be considered the exclusive property of EC-Council. By submitting such work, you acknowledge that EC-Council retains all rights, title, and interest in the submitted content, including any intellectual property contained therein.
Candidates further waive any intellectual property or moral rights in such submissions, confirm that the work is original and free of third-party infringement, and acknowledge that it is provided solely for evaluation purposes, with no ownership or other rights retained.
Our Privacy Policy outlines how we collect, use, store, and protect your personal data during the recruitment process. This may include information such as your name, contact details, employment history, qualifications, and any other details you provide as part of your application. All data is handled in compliance with applicable data protection and privacy regulations.
Submission of your application will be considered as your acceptance of the terms stated above.
