Position overviewPosted 2 weeks ago

Department Manager - Cyber Incident Management (Incident Response)

CP Axtra (Makro PRO) →
Full-time5+ years in cyber security with at least 2 years leading incident response or SOC operations

Suanluang, Bangkok, Thailand

Compensation
THB 150,000 - THB 250,000
THB / month

Estimated range. Confirm compensation with the employer.

Current listing check

We check listings for employer identity, role clarity, and application links before publishing.

Listing record updated: October 9, 2026. We archive records after 60 days without an update. This date does not confirm that the employer is still hiring.

AI Resume Fit Analysis

Quick view

Wondering if your experience matches this role? Upload your CV to see matched skills, a fit score, and areas to develop.

Match My Resume

About the position

This role involves owning the end-to-end incident response lifecycle, acting as Incident Commander during major security events, and managing the SOC team's operational effectiveness. The manager will build and mature the incident response programme by developing scenario-specific playbooks, driving post-incident reviews, and executing tabletop exercises. Responsibilities include managing KPIs like MTTD and MTTR, maintaining threat intelligence pipelines, and coordinating with legal and compliance teams during regulatory incidents.

Responsibilities

Serve as Incident Commander for Severity-1 and Severity-2 security incidents

Build and maintain the incident response playbook library

Drive post-incident reviews (PIRs) for significant incidents

Own and improve SOC operational KPIs

Design and execute quarterly tabletop exercises

Manage relationships with MSSP/MDR providers

Develop and maintain the incident communication framework

Coordinate with legal, compliance, and communications teams

Maintain the threat intelligence integration pipeline

Build incident response capabilities in the SOC team

Requirements

Experience with EDR/XDR platforms (Cortex XDR, CrowdStrike)

Experience with SIEM/SOAR (Splunk, Microsoft Sentinel)

Knowledge of attack frameworks (MITRE ATT&CK, Cyber Kill Chain)

Strong communication skills for executive briefings

Fluent in Thai; working English proficiency

Nice to have

GCIH, GCFA, GCIA certifications

Experience managing MSSP/MDR relationships

Familiarity with Thai regulatory incident reporting (PDPA)

Experience with incident response in retail or e-commerce environments

Purple team experience

Hiring Process

Unknown

Share this job

Job listings are sourced from company websites and career pages. Learn more about how we source jobs.

Bangkok Jobs is not affiliated with the hiring companies. Please verify all job details directly with the employer before applying. We are not responsible for the accuracy of job postings or hiring decisions.