SOC Lead

OFFSHORE BUSINESS PROCESSING INC.; Quezon City; On-site; PHP 558,000 - 614,000; Full time

Benefits offered by this job

HMO on Day 1

Travel opportunities

Work-life balance

Continuous learning

Recognition

Job summary

OFFSHORE BUSINESS PROCESSING INC. is seeking a Senior SOC Lead to oversee daily security operations, threat monitoring, and incident response across enterprise environments in Ortigas/Cubao. You will mentor Tier 1/2 analysts and drive SOC improvements.

The role focuses on SOPs, SIEM tuning (Wazuh), threat intel integration, and security automation, with collaboration across IT, CISO, and Infrastructure teams. Onsite work is required.

Qualifications

• Extensive hands-on experience in Incident Response leadership and SIEM management.
• Deep knowledge of SIEM architecture, log parsing, and security automation.
• Experience with incident response methodologies (NIST SP 800-61, SANS, ISO 27001).
• Strong experience with vulnerability management, EDR deployment, and threat intel feeds.
• Proven leadership and ability to manage shift schedules and analyst workflows.
• Security certifications (CISSP, CISM, GCIH, CySA+).
• Hands-on experience with open-source SIEM/XDR platforms and automation tools.

Responsibilities

• Lead and oversee daily SOC operations, threat monitoring, alert analysis, and incident response activities.
• Manage, mentor, and direct Tier 1 & Tier 2 SOC Analysts, ensuring SLA compliance.
• Serve as the primary escalation point for complex, high-severity security incidents.
• Develop, refine, and enforce SOC SOPs, playbooks, and SCA policies.
• Optimize SIEM solutions (Wazuh), EDR, firewalls, and integration workflows.
• Perform advanced threat hunting, log correlation, and IOC analysis across assets.
• Collaborate with IT Manager, CISO, and Infrastructure teams for patching and remediation.
• Produce detailed incident reports and executive dashboards.
• Drive continuous improvement in threat intel integration and automation.

Skills

Incident Response Leadership

SIEM Management

Threat Triaging

Security Automation

EDR Deployment

Vulnerability Management

Leadership & Mentoring

Technical Documentation

Communication Skills

Tools

Wazuh

n8n

VirusTotal

ServiceDesk Plus

Job description

Job Summary

• What’s in It for You?

• HMO on Day 1 – Start with peace of mind

• Exciting perks and rewards – Performance truly pays off

• Travel opportunities – Explore new horizons

• Get recognized – Your work makes a difference

• Work-life balance – Because your time matters

• Continuous learning – Grow faster than ever

Responsibilities

Salary : 50,000 - 55,000

• Lead and oversee daily SOC operations, threat monitoring, alert analysis, and incident response activities across enterprise environments.

• Manage, mentor, and direct Tier 1 & Tier 2 SOC Analysts, ensuring SLA compliance for incident containment and resolution.

• Serve as the primary escalation point for complex, high-severity security incidents, leading containment, eradication, and post‑incident root cause analysis.

• Develop, refine, and enforce SOC standard operating procedures (SOPs), incident playbooks, and Security Configuration Assessment, (SCA) policies.

• Optimize and manage SIEM solutions (e.g., Wazuh), EDR, firewalls, and integration workflows (e.g., n8n, VirusTotal, ServiceDesk Plus, MSP).

• Perform advanced threat hunting, log correlation, and IOC analysis across network, endpoint, and cloud assets.

• Collaborate with the IT Manager, CISO, and Infrastructure teams to coordinate emergency patching and vulnerability remediation.

• Produce detailed technical incident reports, executive metrics dashboards, and operational risk summaries for executive management.

• Drive continuous improvement in threat intelligence integration, security automation, and threat detection efficiency.

Requirements

• Extensive hands‑on experience in Incident Response leadership, SIEM management, and threat triage.

• In‑depth knowledge of SIEM architecture, log parsing, custom rule detection, and security automation.

• Deep expertise in incident response methodologies aligned with NIST SP 800‑61, SANS, and ISO 27001 standards.

• Strong experience with vulnerability management, EDR deployment, firewalls, and threat intelligence feeds.

• Proven leadership and mentoring skills with the ability to manage shift schedules and analyst workflows.

• Excellent written and verbal communication skills for technical documentation and leadership updates. Preferred Qualifications:

• Professional cybersecurity certifications: CISSP, CISM, GCIH, CySA+, or CASP+.

• Hands‑on experience with open‑source SIEM/XDR platforms like Wazuh, along with automation tools (e.g., n8n).

• Experience in Managed Security Services Provider (MSSP) environments.

• Ok to work onsite in Ortigas and Cubao

• No work schedule preference