SOC Lead

Lead SOC operations, drive incident response and threat hunting, streamline security processes, and keep the team ready for emerging risks.Salary : 50,000 - 55,000Job SummaryWhat’s in It for You?HMO on Day 1 – Start with peace of mindExciting perks and rewards – Performance truly pays offTravel opportunities – Explore new horizonsGet recognized – Your work makes a differenceWork-life balance – Because your time mattersContinuous learning – Grow faster than everResponsibilitiesLead and oversee daily SOC operations, threat monitoring, alert analysis, and incident response activities across enterprise environments.Manage, mentor, and direct Tier 1 & Tier 2 SOC Analysts, ensuring SLA compliance for incident containment and resolution.Serve as the primary escalation point for complex, high-severity security incidents, leading containment, eradication, and post-incident root cause analysis.Develop, refine, and enforce SOC standard operating procedures (SOPs), incident playbooks, and Security Configuration Assessment, (SCA) policies.Optimize and manage SIEM solutions (e.g., Wazuh), EDR, firewalls, and integration workflows (e.g., n8n, VirusTotal, ServiceDesk Plus, MSP).Perform advanced threat hunting, log correlation, and IOC analysis across network, endpoint, and cloud assets.Collaborate with the IT Manager, CISO, and Infrastructure teams to coordinate emergency patching and vulnerability remediation.Produce detailed technical incident reports, executive metrics dashboards, and operational risk summaries for executive management.Drive continuous improvement in threat intelligence integration, security automation, and threat detection efficiency.RequirementsExtensive hands-on experience in Incident Response leadership, SIEM management, and threat triage.In-depth knowledge of SIEM architecture, log parsing, custom rule detection, and security automation.Deep expertise in incident response methodologies aligned with NIST SP 800-61, SANS, and ISO 27001 standards.Strong experience with vulnerability management, EDR deployment, firewalls, and threat intelligence feeds.Proven leadership and mentoring skills with the ability to manage shift schedules and analyst workflows.Excellent written and verbal communication skills for technical documentation and leadership updates.

Preferred Qualifications

Professional cybersecurity certifications: CISSP, CISM, GCIH, CySA+, or CASP+.Hands-on experience with open-source SIEM/XDR platforms like Wazuh, along with automation tools (e.g., n8n). Experience in Managed Security Services Provider (MSSP) environments.Ok to work onsite in Ortigas and CubaoNo work schedule preference