SOC Lead

OFFSHORE BUSINESS PROCESSING INC.; Metro Manila; On-site; PHP 558,000 - 614,000; Full time

Benefits offered by this job

HMO on Day 1

Travel opportunities

Performance rewards

Recognition

Work-life balance

Continuous learning

Job summary

OFFSHORE BUSINESS PROCESSING INC. is seeking a SOC Lead to oversee daily security operations, threat monitoring, and incident response across enterprise environments in the Philippines.

You will mentor Tier 1 and 2 analysts, ensure SLA compliance, and serve as the escalation point for high-severity incidents. The role requires strong SIEM management, threat hunting, and experience with Wazuh, EDR, firewalls, and security automation.

Qualifications

• Extensive hands-on experience in Incident Response leadership and SOC management.
• Deep knowledge of SIEM architecture, log parsing, and security automation.
• Experience with incident response methodologies per NIST SP 800-61, SANS, ISO 27001.

Responsibilities

• Lead and oversee daily SOC operations, threat monitoring, alert analysis, and incident response activities across enterprise environments.
• Mentor Tier 1 & Tier 2 SOC Analysts and ensure SLA compliance for incident containment and resolution.
• Act as primary escalation point for high-severity security incidents, leading containment and post-incident analysis.
• Develop and enforce SOC SOPs, incident playbooks, and SCA policies.
• Optimize SIEM and EDR solutions (Wazuh, EDR, firewalls) and integrate workflows (n8n, VirusTotal, MSP).
• Perform advanced threat hunting, log correlation, and IOC analysis across network, endpoint, and cloud assets.
• Coordinate with IT Manager and CISO for patching and remediation.
• Produce technical incident reports and executive dashboards for management.
• Drive continuous improvement in threat intelligence integration and security automation.

Skills

Incident Response leadership

SIEM management

Threat triage

Threat hunting

Log parsing

Security automation

NIST SP 800-61

ISO 27001

Tools

Wazuh

n8n

ServiceDesk Plus

EDR

Firewalls

Job description

SOC Lead

Job Summary

• What’s in It for You?
• HMO on Day 1 – Start with peace of mind
• Exciting perks and rewards – Performance truly pays off
• Travel opportunities – Explore new horizons
• Get recognized – Your work makes a difference
• Work-life balance – Because your time matters
• Continuous learning – Grow faster than ever

Responsibilities

Salary : 50,000 - 55,000

• Lead and oversee daily SOC operations, threat monitoring, alert analysis, and incident response activities across enterprise environments.
• Manage, mentor, and direct Tier 1 & Tier 2 SOC Analysts, ensuring SLA compliance for incident containment and resolution.
• Serve as the primary escalation point for complex, high-severity security incidents, leading containment, eradication, and post-incident root cause analysis.
• Develop, refine, and enforce SOC standard operating procedures (SOPs), incident playbooks, and Security Configuration Assessment, (SCA) policies.
• Optimize and manage SIEM solutions (e.g., Wazuh), EDR, firewalls, and integration workflows (e.g., n8n, VirusTotal, ServiceDesk Plus, MSP).
• Perform advanced threat hunting, log correlation, and IOC analysis across network, endpoint, and cloud assets.
• Collaborate with the IT Manager, CISO, and Infrastructure teams to coordinate emergency patching and vulnerability remediation.
• Produce detailed technical incident reports, executive metrics dashboards, and operational risk summaries for executive management.
• Drive continuous improvement in threat intelligence integration, security automation, and threat detection efficiency.

Requirements

• Extensive hands-on experience in Incident Response leadership, SIEM management, and threat triage.
• In-depth knowledge of SIEM architecture, log parsing, custom rule detection, and security automation.
• Deep expertise in incident response methodologies aligned with NIST SP 800-61, SANS, and ISO 27001 standards.
• Strong experience with vulnerability management, EDR deployment, firewalls, and threat intelligence feeds.
• Proven leadership and mentoring skills with the ability to manage shift schedules and analyst workflows.
• Excellent written and verbal communication skills for technical documentation and leadership updates. Preferred Qualifications:
• Professional cybersecurity certifications: CISSP, CISM, GCIH, CySA+, or CASP+.
• Hands-on experience with open-source SIEM/XDR platforms like Wazuh, along with automation tools (e.g., n8n).
• Experience in Managed Security Services Provider (MSSP) environments.
• Ok to work onsite in Ortigas and Cubao
• No work schedule preference