Lead SOC Analyst

OFFSHORE BUSINESS PROCESSING INC.; Quezon City; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

OFFSHORE BUSINESS PROCESSING INC. in Metro Manila is seeking a senior SOC Lead to oversee 24/7 security operations, threat monitoring, and incident response across enterprise environments.

You will mentor Tier 1–2 analysts, refine SOPs, and coordinate with IT leadership to ensure rapid containment and remediation. Onsite work in Ortigas/Cubao is required, with no fixed schedule.

Qualifications

• Extensive hands-on experience in Incident Response leadership, SIEM management, and threat triage.
• In-depth knowledge of SIEM architecture, log parsing, custom rule detection, and security automation.
• Deep expertise in incident response methodologies aligned with NIST SP 800-61, SANS, and ISO 27001 standards.
• Strong experience with vulnerability management, EDR deployment, firewalls, and threat intelligence feeds.
• Professional cybersecurity certifications: CISSP, CISM, GCIH, CySA+, or CASP+.
• Hands-on experience with open-source SIEM/XDR platforms like Wazuh, along with automation tools (e.g., n8n).
• Experience in Managed Security Services Provider (MSSP) environments.
• Ok to work onsite in Ortigas and Cubao
• No work schedule preference

Responsibilities

• Lead and oversee daily SOC operations, threat monitoring, alert analysis, and incident response activities across enterprise environments.
• Manage, mentor, and direct Tier 1 & Tier 2 SOC Analysts, ensuring SLA compliance for incident containment and resolution.
• Develop, refine, and enforce SOC SOPs, incident playbooks, and Security Configuration Assessment (SCA) policies.
• Optimize and manage SIEM solutions (e.g., Wazuh), EDR, firewalls, and integration workflows (e.g., n8n, VirusTotal, ServiceDesk Plus, MSP).
• Collaborate with the IT Manager, CISO, and Infrastructure teams to coordinate emergency patching and vulnerability remediation.

Skills

Incident Response Leadership

SIEM Management

Threat Triage

SIEM Architecture

Log Parsing

Security Automation

NIST SP 800-61

SANS Standards

ISO 27001

Vulnerability Management

EDR Deployment

Firewalls

Threat Intelligence Feeds

MSSP Experience

Onsite Work

Automation Tools

Tools

Wazuh

n8n

VirusTotal

ServiceDesk Plus

Job description

Responsibilities

• Lead and oversee daily SOC operations, threat monitoring, alert analysis, and incident response activities across enterprise environments.

• Manage, mentor, and direct Tier 1 & Tier 2 SOC Analysts, ensuring SLA compliance for incident containment and resolution.

• Develop, refine, and enforce SOC standard operating procedures (SOPs), incident playbooks, and Security Configuration Assessment, (SCA) policies.

• Optimize and manage SIEM solutions (e.g., Wazuh), EDR, firewalls, and integration workflows (e.g., n8n, VirusTotal, ServiceDesk Plus, MSP).

• Collaborate with the IT Manager, CISO, and Infrastructure teams to coordinate emergency patching and vulnerability remediation.

Requirements

• Extensive hands‑on experience in Incident Response leadership, SIEM management, and threat triage.

• In‑depth knowledge of SIEM architecture, log parsing, custom rule detection, and security automation.

• Deep expertise in incident response methodologies aligned with NIST SP 800-61, SANS, and ISO 27001 standards.

• Strong experience with vulnerability management, EDR deployment, firewalls, and threat intelligence feeds.

• Professional cybersecurity certifications: CISSP, CISM, GCIH, CySA+, or CASP+.

• Hands‑on experience with open‑source SIEM/XDR platforms like Wazuh, along with automation tools (e.g., n8n).

• Experience in Managed Security Services Provider (MSSP) environments.

• Ok to work onsite in Ortigas and Cubao

• No work schedule preference