Security Operations & Incident Response Leader

Private Advertiser; Mandaluyong; On-site; PHP 3,000,000 - 5,000,000; Full time

Job summary

Private Advertiser is seeking a seasoned Security Operations and Incident Management leader to oversee 24x7 detection, triage, response, and recovery of cybersecurity threats across the enterprise. You will build and mature SOC capabilities, lead incident response, and partner with executives to protect critical data and revenue platforms.

The role requires 8–12+ years in cybersecurity with 5+ years leading SOC/IR, hands-on experience with modern SOC tools, and strong executive communication

Qualifications

• 8–12+ years in cybersecurity with 5+ years leading SOC/IR in mid-to-large enterprises or MSSP.
• Hands-on with modern SOC tooling and incident response leadership under pressure.
• Experience coordinating cross-functional teams across Legal, Privacy, Comms, and Execs.
• Strong written and verbal English for executive communications.
• Ability to manage cross-geo relationships and vendor ecosystems.

Responsibilities

• Define and own the SOC strategy, roadmap, and operating model.
• Oversee 24x7 monitoring, detection engineering, and threat intel alignment.
• Lead end-to-end incident response lifecycle and crisis management.
• Coordinate with Legal, Privacy, Comms, HR, and Business Continuity during major events.
• Manage MSSP/MDR relationships, SLAs, and service reviews.
• Drive vulnerability management, attack surface monitoring, and remediation.
• Advance tooling, automation, and secure-by-design practices.

Skills

Security leadership

SOC/IR management

Incident response

Executive communication

English proficiency

Tools

Microsoft Sentinel

Splunk

CrowdStrike

Palo Alto

Google Chronicle

Job description

Private Advertiser is seeking a seasoned Security Operations and Incident Management leader to oversee 24x7 detection, triage, response, and recovery of cybersecurity threats across the enterprise. You will build and mature SOC capabilities, lead incident response, and partner with executives to protect critical data and revenue platforms.

The role requires 8–12+ years in cybersecurity with 5+ years leading SOC/IR, hands-on experience with modern SOC tools, and strong executive communication