SOC Lead - Incident Response & Threat Hunting

OFFSHORE BUSINESS PROCESSING INC.; Philippines; On-site; PHP 558,000 - 614,000; Full time

Benefits offered by this job

HMO day 1

Perks & rewards

Travel opportunities

Recognition

Work-life balance

Continuous learning

Job summary

OFFSHORE BUSINESS PROCESSING INC. seeks a seasoned SOC leader to oversee daily incident response, threat monitoring, and escalation for complex security events.

You will mentor analysts, refine playbooks, and coordinate with IT and security teams to drive rapid containment and remediation. The role emphasizes strong SIEM expertise (Wazuh), threat intelligence integration, and automation through tools like n8n, with a focus on MSSP‑style incidents across enterprise environments.

Qualifications

• Experience leading incident response operations.
• Strong SIEM architecture and log parsing knowledge.
• Familiarity with incident response methodologies (NIST SP 800-61, SANS, ISO 27001).
• Experience with vulnerability management and threat feeds.

Responsibilities

• Lead daily SOC operations, threat monitoring, and incident response across enterprise environments.
• Mentor Tier 1 & Tier 2 SOC Analysts and ensure SLA compliance.
• Serve as escalation point for high-severity incidents and lead containment and eradication.
• Develop and enforce SOC SOPs, playbooks, and security policies.
• Optimize SIEM, EDR, firewalls, and integration workflows (n8n, MSP).
• Conduct advanced threat hunting, log correlation, and IOC analysis.
• Coordinate patching and vulnerability remediation with IT leadership.
• Produce incident reports, executive dashboards, and risk summaries.
• Drive threat intel integration and security automation improvements.

Skills

Incident response leadership

SIEM management

Threat triage

Threat hunting

Security automation

Education

CISSP

CISM

GCIH

CySA+

CASP+

Tools

Wazuh

n8n

ServiceDesk Plus

Job description

OFFSHORE BUSINESS PROCESSING INC. seeks a seasoned SOC leader to oversee daily incident response, threat monitoring, and escalation for complex security events.

You will mentor analysts, refine playbooks, and coordinate with IT and security teams to drive rapid containment and remediation. The role emphasizes strong SIEM expertise (Wazuh), threat intelligence integration, and automation through tools like n8n, with a focus on MSSP‑style incidents across enterprise environments.