SOC Operations Lead - Incident Response & Threat Detection

SMITS, Inc. - IT Company of San Miguel Corporation; Pasig; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

SMITS, Inc. - IT Company of San Miguel Corporation in Metro Manila is seeking an experienced SOC Operations Lead to oversee daily security operations, mentor analysts, and ensure incident handling aligns with SLAs and procedures.

You will coordinate with internal teams and vendors, review tickets, and drive improvements in detection and response capabilities. The role requires a strong background in security operations, SIEM/EDR, MITRE ATT&CK, and incident lifecycle management, with proven

Qualifications

• Bachelor degree in Computer Science, ECE, Computer Engineering or IT-related field.
• Certifications such as CEH or CCNA preferred.
• Experience in security operations, incident response, or threat monitoring.

Responsibilities

• Oversee daily SOC operations, including alert monitoring, triage, escalation, and incident tracking.
• Lead and mentor SOC analysts, providing guidance on investigations, threat analysis, and response actions.
• Ensure incidents are handled in accordance with SLAs, escalation matrices, and established security procedures.
• Review and validate incident tickets, case notes, and closure details for completeness and accuracy.
• Coordinate with internal teams and external vendors during security incidents and major outages.
• Monitor SOC tools, firewall, email security, and other security platforms for suspicious activity.
• Improve SOC processes, detection rules, playbooks, and reporting to increase efficiency and response quality.
• Prepare and present operational metrics, incident trends, and security reports to management.
• Support incident response activities, including containment, investigation, remediation, and post-incident review.
• Ensure knowledge transfer, training, and cross-skilling within the SOC team.

Skills

SIEM & SOAR

EDR/XDR

Threat monitoring

Incident response

MITRE ATT&CK

Leadership

Communication

Education

Bachelor degree in Computer Science / IT

Tools

QRadar

Splunk

SentinelOne

CrowdStrike Falcon

ServiceNow

Job description

SMITS, Inc. - IT Company of San Miguel Corporation in Metro Manila is seeking an experienced SOC Operations Lead to oversee daily security operations, mentor analysts, and ensure incident handling aligns with SLAs and procedures.

You will coordinate with internal teams and vendors, review tickets, and drive improvements in detection and response capabilities. The role requires a strong background in security operations, SIEM/EDR, MITRE ATT&CK, and incident lifecycle management, with proven