SOC Manager (Cybersecurity)

KPMG R.G. Manabat & Co.; Manila; On-site; PHP 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Day 1 HMO with 2 Free Dependents

Communication Allowance

Rice Allowance

Clothing Allowance

Christmas/Holiday Gift

Group Personal Accident Insurance

Life Insurance

Optical/Medicine/Dental Allowance

Bereavement Assistance

Job summary

KPMG R.G. Manabat & Co. is seeking a Security Operations Manager to lead a 24x7 SOC, coordinating analysts, processes, and technology to meet security monitoring, analysis, and escalation objectives.

The role interfaces with executive management and oversees incident response coordination. The ideal candidate has 7+ years in security leadership, strong ITIL experience, and expertise across SIEM tools, scripting, and security best practices to drive continual improvement and operational

Qualifications

• Minimum 7 years Security leadership, with experience building long-term career development plans for team members at all levels.
• Exceptional operational rigor with extensive real-world experience in ITIL methodologies and frameworks for IT Operations.
• Experience in designing, implementing and measuring relevant security and technology management critical success factors, KPIs, and metrics.
• Ability to create shift schedules to ensure 24x7 coverage by support personnel.
• In-depth knowledge of modern security concepts.
• Advanced scripting knowledge with languages like PowerShell, bash/ksh/sh, Cisco IOS.sh, JunOS sh/csh, Perl, Tcl, Lua.
• Familiarity with Azure Sentinel.
• 4-6 years' experience with SIEM tools (Sentinel, Splunk, LogRhythm, etc.).
• 4-6 years' experience with Incident Response activities.
• Expert knowledge of security best practices and concepts.

Responsibilities

• Lead the 24x7 delivery team, foster innovation, and drive accountability within SOC engineering
• Oversee the daily activities of the SOC to ensure the integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies
• Ensure escalation of cases to the appropriate teams
• Conduct follow-up meetings of escalated or noteworthy cases and modify SOPs and playbooks based on policies, standards and best practices learned from previous cases
• Provide technical oversight for security tool deployment and implementation
• Continuously monitor levels of service as well as interpret and prioritize threats through use of intrusion detection systems, firewalls and other boundary protection devices, and any security incident management products deployed
• Recognize potential, successful, and unsuccessful intrusion attempts and compromises through review and analyses of relevant event detail and summary information
• Monitor and proactively mitigate information security risks
• Coordinate shift schedule and deployment of staffing within the established structure
• Manage staffing, including recruitment, supervision, scheduling, development, evaluation, and disciplinary actions

Skills

Security leadership

ITIL

Scripting

Azure Sentinel

SIEM tools

Incident response

Shift scheduling

Security concepts

Tools

Azure Sentinel

Splunk

LogRhythm

Job description

About the role

The Security Operations Manager is responsible for leading the day-to-day operations of the SOC Analyst staff. The role coordinates and works with the SOC Analysts to make sure that the analysts, processes, and technology are meeting the SOC security monitoring, analysis, and escalation objectives, organization service level agreements, objectives, and metrics. They are also responsible for communicating with the executive level management team (when deemed necessary) and serving as the principle liaison coordinating incident response functions.

Key responsibilities

• Lead the 24x7 delivery team, foster innovation, and drive accountability within SOC engineering

• Oversee the daily activities of the SOC to ensure the integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies

• Ensure escalation of cases to the appropriate teams

• Conduct follow-up meetings of escalated or noteworthy cases and modify SOPs and playbooks based on policies, standards and best practices learned from previous cases

• Provide technical oversight for security tool deployment and implementation

• Continuously monitor levels of service as well as interpret and prioritize threats through use of intrusion detection systems, firewalls and other boundary protection devices, and any security incident management products deployed

• Recognize potential, successful, and unsuccessful intrusion attempts and compromises through review and analyses of relevant event detail and summary information

• Monitor and proactively mitigate information security risks

• Coordinate shift schedule and deployment of staffing within the established structure

• Manage staffing, including recruitment, supervision, scheduling, development, evaluation, and disciplinary actions

About you

• Minimum 7 years Security leadership, with experience building long-term career development plans for team members at all levels

• Exceptional operational rigor with extensive real-world experience in ITIL methodologies and frameworks for IT operations

• Experience in designing, implementing and measuring relevant security and technology management critical success factors, key performance indicators, and metrics

• Ability to create shift schedules to ensure 24x7 coverage by support personnel

• In-depth knowledge of modern security concepts

• Advanced scripting knowledge with languages like PowerShell, bash/ksh/sh, Cisco IOS.sh, JunOS sh/csh, Perl, Tcl, Lua

• Familiarity with Azure Sentinel

• 4-6 year's experience with SIEM tools (Sentinel, Splunk, Logrhythm, etc.)

• 4-6 year's experience with Incident Response activities

• Expert knowledge of security best practices and concepts

Benefits

• Day 1 HMO with 2 Free Dependents

• Communication Allowance

• Rice Allowance

• Clothing Allowance

• Christmas/Holiday Gift

• Group Personal Accident Insurance

• Life Insurance

• Optical/Medicine/Dental Allowance

• Bereavement Assistance