Cybersecurity Operations Lead

PLDT Global, Inc.; Makati; On-site; PHP 1,200,000 - 2,000,000; Full time

Job summary

PLDT Global, Inc. is seeking a Senior Cybersecurity Operations leader to oversee end-to-end security operations with emphasis on threat detection, incident response, and continuous monitoring.

You will lead Red and Blue teams, drive data-driven security analysis, and coordinate across on-premise and AWS cloud environments to strengthen the security posture. The role requires deep expertise in SIEM technologies, network security infrastructure, and data/ETL processes; you will provide regular

Qualifications

• Deep understanding of cybersecurity best practices and threat landscapes.
• Lead and manage Red and Blue specialists, ensuring all members are trained, motivated, and working effectively together.
• Proficiency in threat intelligence, incident detection, analysis, and response.
• Oversee incident response efforts, ensuring timely and effective handling of security incidents.
• Manage SOC tools and resources, ensuring they are up-to-date and effectively utilized.
• Report to the Cybersecurity Head on security operation activities, performance, and any notable incidents or threats.

Responsibilities

• Deep understanding of cybersecurity best practices and threat landscapes
• Lead and manage the Red and Blue specialists, ensuring all members are trained, motivated, and working effectively together
• Proficiency in threat intelligence, incident detection, analysis, and response
• Oversee incident response efforts, ensuring timely and effective handling of security incidents
• Manage SOC tools and resources, ensuring they are up-to-date and effectively utilized
• Report to the Cybersecurity Head on security operation activities, performance, and any notable incidents or threats

Skills

Threat detection

Incident response

SOC operations

Leadership

Data ETL

Education

Security certifications

Tools

Cisco firewalls

Proxy systems

Load balancers

Web application firewalls

SIP infrastructure

Database management

Splunk

ArcSight

QRadar

ELK

Wazuh

AWS Cloud

Job description

Responsible for overseeing end-to-end security operations, with a strong focus on threat detection, incident response, and continuous monitoring. This role leads and develops Red and Blue team specialists, ensuring effective collaboration, skills readiness, and operational excellence. The position manages SOC tools and platforms, drives the analysis and correlation of security events, and ensures timely and effective handling of incidents across on-premise and cloud environments. With deep expertise in network and security infrastructure, SIEM technologies, and data/ETL processes, the role provides regular reporting and strategic insights to the Cybersecurity Head on security posture, performance, and emerging threats.

Role & Responsibilities:

• Deep understanding of cybersecurity best practices and threat landscapes
• Lead and manage the Red and Blue specialists, ensuring all members are trained, motivated, and working effectively together
• Proficiency in threat intelligence, incident detection, analysis, and response
• Oversee incident response efforts, ensuring timely and effective handling of security incidents
• Manage SOC tools and resources, ensuring they are up-to-date and effectively utilized
• Report to the Cybersecurity Head on security operation activities, performance, and any notable incidents or threats

Technical Skillsets Requirements:

• At least 5 years of working experience of Cisco firewalls, proxy systems, load balancers, web application firewalls, SIP Infrastructure and Database Management - On Premise and on AWS Cloud
• At least 3 years of working experience in building, maintaining, and operating Security Information and Event Management (SIEM) technologies (e.g., Splunk, ArcSight, QRadar, ELK, Wazuh)
• A must of experience in developing data warehouse and Extract Transform Load (ETL)
• A must of Ability to create, correlate and analyze reports on security events and monitoring.
• Relevant certification is a plus

Location

12F, Rufino Pacific Tower, Ayala Ave cor. Rufino St.,Makati, Philippines

Purpose of Data Collection

The information you provide in this application form will be used solely for recruitment purposes. We will use your data to assess your suitability for employment, communicate with you regarding your application, and comply with applicable legal and regulatory requirements. Your personal information will be handled confidentially and will not be used for any other purpose.