Cybersecurity Incident Response Lead

RecruitNest Consulting; Taguig; On-site; PHP 1,200,000 - 2,100,000; Full time

Job summary

RecruitNest Consulting in Taguig, Philippines is seeking a Cyber Agentic SOC Lead Senior Associate to join the Cyber, Data & Tech Risk team and strengthen the security posture of global organizations. You will lead incident response, oversee SOC operations, and drive detection, investigation, and remediation of threats.

You will work closely with clients and internal teams to protect critical systems, leveraging advanced security technologies and threat intelligence to address evolving cyber

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 4+ years of experience in cybersecurity, incident response, SOC operations, or cyber defense.
• Hands-on experience in cybersecurity incident management and threat detection.
• Knowledge of cybersecurity frameworks, governance, and risk management practices.
• Experience in digital forensics, network forensics, and incident investigation.
• Strong understanding of network security technologies, security monitoring tools, and firewall management.
• Experience utilizing cyber threat intelligence to identify and mitigate emerging threats.
• Relevant certifications such as GIAC (GCFA, GCIA, GCIH) or equivalent incident response certifications are highly preferred.
• Strong analytical, problem-solving, stakeholder management, and communication skills.

Responsibilities

• Lead the detection, analysis, investigation, and resolution of cybersecurity incidents.
• Oversee Security Operations Center (SOC) activities to ensure effective monitoring and threat response.
• Develop and implement strategies to mitigate cyber threats and improve security resilience.
• Conduct vulnerability assessments and support remediation initiatives to reduce security risks.
• Perform digital and network forensic investigations to identify the root cause of security incidents.
• Utilize threat intelligence and security monitoring tools to detect and respond to threats proactively.
• Collaborate with clients and stakeholders to understand security requirements and provide recommendations.
• Analyze security data and trends to generate actionable insights and improve defenses.
• Support the implementation of cybersecurity frameworks, governance processes, and best practices.
• Mentor junior team members and contribute to a culture of continuous learning and operational excellence.

Skills

Cybersecurity IR

SOC Operations

Threat Detection

Digital Forensics

Network Forensics

Incident Investigation

Threat Intelligence

Governance & Frameworks

Firewall Management

Security Monitoring

Security Analytics

Lead / Mentoring

Stakeholder Management

Communication Skills

Education

Bachelor's Degree in CS/IT or related

Tools

Security Monitoring Tools

Threat Intelligence Platforms

Digital Forensics Tools

Job description

Job Expectations

• Position Type: Experienced - Senior/Lead
• Employment Type: Full-Time, Permanent (Direct Hire)
• Work Setup & Location: Fully Onsite - BGC, Taguig
• Work Schedule: Weekdays; Mid Shift
• Industry: Global Accounting Firm

About the Job

We are looking for a Cyber Agentic SOC Lead Senior Associate to join our client's Cyber, Data & Tech Risk team and help strengthen the security posture of global organizations. In this role, you will lead cybersecurity incident response activities, oversee Security Operations Center (SOC) functions, and support the detection, investigation, and remediation of security threats. You will work closely with clients and internal teams to protect critical systems and data, while leveraging advanced security technologies, threat intelligence, and forensic techniques to address evolving cyber risks.

Key Responsibilities

• Lead the detection, analysis, investigation, and resolution of cybersecurity incidents.
• Oversee Security Operations Center (SOC) activities to ensure effective monitoring and threat response.
• Develop and implement strategies to mitigate cyber threats and improve security resilience.
• Conduct vulnerability assessments and support remediation initiatives to reduce security risks.
• Perform digital and network forensic investigations to identify the root cause of security incidents.
• Utilize threat intelligence and security monitoring tools to detect and respond to threats proactively.
• Collaborate with clients and stakeholders to understand security requirements and provide recommendations.
• Analyze security data and trends to generate actionable insights and improve defenses.
• Support the implementation of cybersecurity frameworks, governance processes, and best practices.
• Mentor junior team members and contribute to a culture of continuous learning and operational excellence.

Qualifications

• Bachelor's Degree in Computer Science, Information Technology, or related field.
• 4+ years of experience in cybersecurity, incident response, SOC operations, or cyber defense.
• Hands-on experience in cybersecurity incident management and threat detection.
• Knowledge of cybersecurity frameworks, governance, and risk management practices.
• Experience in digital forensics, network forensics, and incident investigation.
• Strong understanding of network security technologies, security monitoring tools, and firewall management.
• Experience utilizing cyber threat intelligence to identify and mitigate emerging threats.
• Relevant certifications such as GIAC (GCFA, GCIA, GCIH) or equivalent incident response certifications are highly preferred.
• Strong analytical, problem-solving, stakeholder management, and communication skills.