SOC Lead

Lead and oversee daily SOC operations, threat monitoring, alert analysis, and incident response activities across enterprise! Apply now!

Job Summary

• What’s in It for You?
• HMO on Day 1 – Start with peace of mind
• Exciting perks and rewards – Performance truly pays off
• Travel opportunities – Explore new horizons
• Get recognized – Your work makes a difference
• Work-life balance – Because your time matters
• Continuous learning – Grow faster than ever

Responsibilities

Salary : 50,000 - 55,000

• Lead and oversee daily SOC operations, threat monitoring, alert analysis, and incident response activities across enterprise environments.
• Manage, mentor, and direct Tier 1 & Tier 2 SOC Analysts, ensuring SLA compliance for incident containment and resolution.
• Serve as the primary escalation point for complex, high-severity security incidents, leading containment, eradication, and post-incident root cause analysis.
• Develop, refine, and enforce SOC standard operating procedures (SOPs), incident playbooks, and Security Configuration Assessment, (SCA) policies.
• Optimize and manage SIEM solutions (e.g., Wazuh), EDR, firewalls, and integration workflows (e.g., n8n, VirusTotal, ServiceDesk Plus, MSP).
• Perform advanced threat hunting, log correlation, and IOC analysis across network, endpoint, and cloud assets.
• Collaborate with the IT Manager, CISO, and Infrastructure teams to coordinate emergency patching and vulnerability remediation.
• Produce detailed technical incident reports, executive metrics dashboards, and operational risk summaries for executive management.
• Drive continuous improvement in threat intelligence integration, security automation, and threat detection efficiency.

Requirements

• Extensive hands-on experience in Incident Response leadership, SIEM management, and threat triage.
• In-depth knowledge of SIEM architecture, log parsing, custom rule detection, and security automation.
• Deep expertise in incident response methodologies aligned with NIST SP 800-61, SANS, and ISO 27001 standards.
• Strong experience with vulnerability management, EDR deployment, firewalls, and threat intelligence feeds.
• Proven leadership and mentoring skills with the ability to manage shift schedules and analyst workflows.
• Excellent written and verbal communication skills for technical documentation and leadership updates. Preferred Qualifications:
• Professional cybersecurity certifications: CISSP, CISM, GCIH, CySA+, or CASP+.
• Hands-on experience with open-source SIEM/XDR platforms like Wazuh, along with automation tools (e.g., n8n).
• Experience in Managed Security Services Provider (MSSP) environments.
• Ok to work onsite in Ortigas and Cubao
• No work schedule preference