SOC L3 Analyst Lead

KPMG R.G. Manabat & Co.

Philippines

On-site

PHP 1,800,000 - 3,400,000

Full time

7 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

HMO with 2 Free Dependents

Communication Allowance

Rice Allowance

Clothing Allowance

Christmas/Holiday Gift (Christmas Cash

Group Personal Accident Insurance

Life Insurance with coverage

Flexi-ben reimbursement (Medical/Dent/

Bereavement Assistance

Retirement Plan

Leave Privileges

Firm-wide holiday shutdown on last 2 w

Company work suspensions duringExtreme

Job summary

KPMG R.G. Manabat & Co. in the Philippines seeks a senior security operations leader to define and drive the Managed Detection & Response service as a managed offering.

You will oversee incident response orchestration, threat detection, and cross-functional delivery to clients. You will lead the SOC team, coordinate with partners, and shape use-cases and processes for rapid containment of high-severity threats, while staying current with industry trends and best practices.

Qualifications

7+ years leading Enterprise Security Operations Centers or MDR/IR teams.
Experience as L3 SOC Analyst, threat hunting, and incident response.
Knowledge of on-prem, hybrid and cloud security concepts and protocols.
Experience delivering technical readiness, delivery support, and technical requirements gathering.
Industry certifications such as CEH, GIAC, OSCP, CREST, GCIH, GPEN, and platform certs (Microsoft, Splunk, Sentinel).
Experience with Security Operation Center, Threat Intelligence Management, Vulnerability Research, Digital Forensics, Incident Response, Endpoint Management, Network Security.

Responsibilities

Formulate and define the strategic direction for Managed Detection & Response as a managed service.
Grow pipeline by working with internal and external channels.
Identify opportunities for additional managed services and consulting services.
Investigate and orchestrate for complex high-severity security alerts, threats or incidents.
Provide people, process and technology support to ensure timely detection and alerting of attacks.
Isolate, triage and eradicate malicious behaviors.
Lead incident response orchestration with clients.
Lead research and correlation across data sets, log collectors and threat feeds.
Direct product managers in developing new or modified MDR solutions.
Create and develop SOC processes and Use Case Catalog.

Skills

SOC leadership

Threat hunting

Incident response

Digital forensics

Penetration testing

Cloud security

Security operations

Product management (SaaS/IaaS)

L3 SOC Analyst

Vulnerability management

Tools

Splunk

Microsoft security tools

Threat intelligence feeds

Sentinel

Job description

About the role

This role involves formulating and defining the strategic direction for Managed Detection & Response as a managed service, growing the pipeline by working with internal and external channels, and identifying opportunities for other managed services and consulting services. You will keep abreast of industrial, technology and business trends, perform investigation and orchestration for complex and high severity security alerts, threats or incidents, and serve as the lead point of contact facilitating incident response orchestration with clients. As a leader of a team, you will ensure that the right things are being worked on at the right time and ensure quality throughout.

Key responsibilities

Formulate and define the strategic direction for Managed Detection & Response as a managed service
Grow pipeline of the solution by working closely with internal and external channels
Identify and create pull through opportunity for other managed services and consulting services
Perform investigation and orchestration for complex and high severity security alerts, threats or incidents
Provide the people, process and technology background to ensure timely detection, identification and alerting of possible attacks, intrusions, anomalous activities, intrusion attempts, compromises, malicious behavior, insider risk, and misuse activities
Isolate, triage and eradicate malicious behaviors
Serve as the lead point of contact facilitating incident response orchestration with client
Lead research, analysis and correlation efforts across data sets, log collectors and threat feeds
Direct technical product managers in developing new or modified solutions for Managed Detection and Response
Create and develop SOC processes and procedures, lead strategy development and execution of Use Case Catalog

About you

At least 7+ years of experience leading Enterprise Security Operations Centers or Managed Detection and Response analyst or incident response teams
Experience in lead security operations center analyst (L3), threat hunting, penetration testing, digital forensics, incident response, recognizing and categorizing organizational vulnerabilities and attacks
Knowledge of on-prem, hybrid and cloud security concepts and protocols
Experience providing customer technical readiness, delivery support services, on premise and remote technical support, solution development, technical requirements gathering
Certifications: CEH, GIAC, OSCP, CREST, GCIH, CCIA, GPEN, Platform Certifications (Microsoft, Splunk, Sentinel, etc.)
Experience with Cyber-Security solutions, Security Operation Center, Threat Intelligence Management, Vulnerability Research, Digital Forensics, Incident Response, Endpoint Management, Network Security
Product Management experience with Software as a Service (SaaS) or Infrastructure as a Service (IaaS) offerings for enterprises
3+ years Level 3 SOC Analyst experience
Demonstrated understanding of the techniques and methods of modern product discovery and product delivery
Knowledge of a global, 24/7, high availability and high trust operation aspects of managed services

Benefits