SOC Lead

OFFSHORE BUSINESS PROCESSING INC.; Philippines; On-site; PHP 558,000 - 614,000; Full time

Benefits offered by this job

HMO day 1

Perks & rewards

Travel opportunities

Recognition

Work-life balance

Continuous learning

Job summary

OFFSHORE BUSINESS PROCESSING INC. seeks a seasoned SOC leader to oversee daily incident response, threat monitoring, and escalation for complex security events.

You will mentor analysts, refine playbooks, and coordinate with IT and security teams to drive rapid containment and remediation. The role emphasizes strong SIEM expertise (Wazuh), threat intelligence integration, and automation through tools like n8n, with a focus on MSSP‑style incidents across enterprise environments.

Qualifications

• Experience leading incident response operations.
• Strong SIEM architecture and log parsing knowledge.
• Familiarity with incident response methodologies (NIST SP 800-61, SANS, ISO 27001).
• Experience with vulnerability management and threat feeds.

Responsibilities

• Lead daily SOC operations, threat monitoring, and incident response across enterprise environments.
• Mentor Tier 1 & Tier 2 SOC Analysts and ensure SLA compliance.
• Serve as escalation point for high-severity incidents and lead containment and eradication.
• Develop and enforce SOC SOPs, playbooks, and security policies.
• Optimize SIEM, EDR, firewalls, and integration workflows (n8n, MSP).
• Conduct advanced threat hunting, log correlation, and IOC analysis.
• Coordinate patching and vulnerability remediation with IT leadership.
• Produce incident reports, executive dashboards, and risk summaries.
• Drive threat intel integration and security automation improvements.

Skills

Incident response leadership

SIEM management

Threat triage

Threat hunting

Security automation

Education

CISSP

CISM

GCIH

CySA+

CASP+

Tools

Wazuh

n8n

ServiceDesk Plus

Job description

Job Summary

• What’s in It for You?

• HMO on Day 1 – Start with peace of mind

• Exciting perks and rewards – Performance truly pays off

• Travel opportunities – Explore new horizons

• Get recognized – Your work makes a difference

• Work-life balance – Because your time matters

• Continuous learning – Grow faster than ever

Responsibilities

Salary : 50,000 - 55,000

• Lead and oversee daily SOC operations, threat monitoring, alert analysis, and incident response activities across enterprise environments.

• Manage, mentor, and direct Tier 1 & Tier 2 SOC Analysts, ensuring SLA compliance for incident containment and resolution.

• Serve as the primary escalation point for complex, high-severity security incidents, leading containment, eradication, and post-incident root cause analysis.

• Develop, refine, and enforce SOC standard operating procedures (SOPs), incident playbooks, and Security Configuration Assessment, (SCA) policies.

• Optimize and manage SIEM solutions (e.g., Wazuh), EDR, firewalls, and integration workflows (e.g., n8n, VirusTotal, ServiceDesk Plus, MSP).

• Perform advanced threat hunting, log correlation, and IOC analysis across network, endpoint, and cloud assets.

• Collaborate with the IT Manager, CISO, and Infrastructure teams to coordinate emergency patching and vulnerability remediation.

• Produce detailed technical incident reports, executive metrics dashboards, and operational risk summaries for executive management.

• Drive continuous improvement in threat intelligence integration, security automation, and threat detection efficiency.

Requirements

• Extensive hands‑on experience in Incident Response leadership, SIEM management, and threat triage.

• In‑depth knowledge of SIEM architecture, log parsing, custom rule detection, and security automation.

• Deep expertise in incident response methodologies aligned with NIST SP 800‑61, SANS, and ISO 27001 standards.

• Strong experience with vulnerability management, EDR deployment, firewalls, and threat intelligence feeds.

• Proven leadership and mentoring skills with the ability to manage shift schedules and analyst workflows.

• Excellent written and verbal communication skills for technical documentation and leadership updates. Preferred Qualifications:

• Professional cybersecurity certifications: CISSP, CISM, GCIH, CySA+, or CASP+.

• Hands‑on experience with open‑source SIEM/XDR platforms like Wazuh, along with automation tools (e.g., n8n).

• Experience in Managed Security Services Provider (MSSP) environments.

• Ok to work onsite in Ortigas and Cubao

• No work schedule preference