SOC Lead

Job Summary What’s in It for You? HMO on Day 1 – Start with peace of mind Exciting perks and rewards – Performance truly pays off Travel opportunities – Explore new horizons Get recognized – Your work makes a difference Work-life balance – Because your time matters Continuous learning – Grow faster than ever Responsibilities Salary : 50,000 - 55,000 Lead and oversee daily SOC operations, threat monitoring, alert analysis, and incident response activities across enterprise environments. Manage, mentor, and direct Tier 1 & Tier 2 SOC Analysts, ensuring SLA compliance for incident containment and resolution. Serve as the primary escalation point for complex, high-severity security incidents, leading containment, eradication, and post-incident root cause analysis. Develop, refine, and enforce SOC standard operating procedures (SOPs), incident playbooks, and Security Configuration Assessment, (SCA) policies. Optimize and manage SIEM solutions (e.g., Wazuh), EDR, firewalls, and integration workflows (e.g., n8n, VirusTotal, ServiceDesk Plus, MSP). Perform advanced threat hunting, log correlation, and IOC analysis across network, endpoint, and cloud assets. Collaborate with the IT Manager, CISO, and Infrastructure teams to coordinate emergency patching and vulnerability remediation. Produce detailed technical incident reports, executive metrics dashboards, and operational risk summaries for executive management. Drive continuous improvement in threat intelligence integration, security automation, and threat detection efficiency. Requirements Extensive hands-on experience in Incident Response leadership, SIEM management, and threat triage. In-depth knowledge of SIEM architecture, log parsing, custom rule detection, and security automation. Deep expertise in incident response methodologies aligned with NIST SP 800-61, SANS, and ISO 27001 standards. Strong experience with vulnerability management, EDR deployment, firewalls, and threat intelligence feeds. Proven leadership and mentoring skills with the ability to manage shift schedules and analyst workflows. Excellent written and verbal communication skills for technical documentation and leadership updates. Preferred Qualifications: Professional cybersecurity certifications: CISSP, CISM, GCIH, CySA+, or CASP+. Hands-on experience with open-source SIEM/XDR platforms like Wazuh, along with automation tools (e.g., n8n). Experience in Managed Security Services Provider (MSSP) environments. Ok to work onsite in Ortigas and Cubao No work schedule preference