Lead SOC Analyst

Responsibilities Lead and oversee daily SOC operations, threat monitoring, alert analysis, and incident response activities across enterprise environments. Manage, mentor, and direct Tier 1 & Tier 2 SOC Analysts, ensuring SLA compliance for incident containment and resolution. Develop, refine, and enforce SOC standard operating procedures (SOPs), incident playbooks, and Security Configuration Assessment, (SCA) policies. Optimize and manage SIEM solutions (e.g., Wazuh), EDR, firewalls, and integration workflows (e.g., n8n, VirusTotal, ServiceDesk Plus, MSP). Collaborate with the IT Manager, CISO, and Infrastructure teams to coordinate emergency patching and vulnerability remediation. Requirements Extensive hands-on experience in Incident Response leadership, SIEM management, and threat triage. In-depth knowledge of SIEM architecture, log parsing, custom rule detection, and security automation. Deep expertise in incident response methodologies aligned with NIST SP 800-61, SANS, and ISO 27001 standards. Strong experience with vulnerability management, EDR deployment, firewalls, and threat intelligence feeds. Professional cybersecurity certifications: CISSP, CISM, GCIH, CySA+, or CASP+. Hands-on experience with open-source SIEM/XDR platforms like Wazuh, along with automation tools (e.g., n8n). Experience in Managed Security Services Provider (MSSP) environments. Ok to work onsite in Ortigas and Cubao No work schedule preference