Senior SOC Analyst - Remote Incident Response Lead

Inchcape Motors Finland Oy; Philippines; Hybrid; PHP 500,000 - 800,000; Full time

Benefits offered by this job

Hybrid or remote work options

Remote work bonus

HMO coverage and life insurance

Birthday leave

Job summary

Inchcape Digital is seeking an L3 SOC Analyst to lead investigations of complex cybersecurity incidents and drive improvements in detection, threat hunting, and security automation. You will coordinate containment and recovery efforts, develop detection content, and mentor junior analysts in a mature SOC environment.

The role offers hybrid or remote work options, exposure to MITRE ATT&CK frameworks, and opportunities to collaborate across enterprise security platforms while advancing our

Qualifications

• 4-5+ years of hands-on SOC experience
• Senior-level work in Incident Response, Threat Hunting, or Detection Engineering
• Strong expertise in SIEM, EDR, SOAR, cloud and network security

Responsibilities

• Lead investigations and responses to complex, high-severity cybersecurity incidents
• Coordinate containment, eradication and recovery activities with stakeholders
• Develop and enhance detection rules, threat models and monitoring across SIEM/EDR/cloud/identity
• Perform proactive threat hunting to identify advanced threats and gaps
• Build and optimize SOAR playbooks and automations
• Mentor junior SOC analysts and participate in on-call escalations

Skills

SIEM

EDR

SOAR

Cloud Security

Identity Security

Endpoint Security

Email Security

Monitoring platforms

Tools

MITRE ATT&CK

Job description

Inchcape Digital is seeking an L3 SOC Analyst to lead investigations of complex cybersecurity incidents and drive improvements in detection, threat hunting, and security automation. You will coordinate containment and recovery efforts, develop detection content, and mentor junior analysts in a mature SOC environment.

The role offers hybrid or remote work options, exposure to MITRE ATT&CK frameworks, and opportunities to collaborate across enterprise security platforms while advancing our