SOC Team Lead (L2) | Cyber Defense & Incident Response

Location: Cubao

Work Setup: Hybrid
Shift: Shifting
Experience: 3–5+ years in SOC / Incident Response / Cyber Defense

Lead the Response. Strengthen the Defense.

We’re looking for an experienced SOC Team Lead (L2) to lead complex security investigations, guide SOC analysts, and strengthen enterprise cyber defense capabilities.

What You’ll Do

• Lead investigation and resolution of complex incidents escalated by L1 analysts.

• Perform incident triage, threat validation, and root cause analysis.

• Coordinate high-severity incident response with CSIRT, engineering teams, and key stakeholders.

• Conduct threat hunting using IoCs and threat intelligence.

• Analyze logs, network traffic, and security events across enterprise environments.

• Coach and mentor SOC analysts on investigation and incident-handling best practices.

• Partner with detection engineering teams to improve SIEM use cases, alert quality, and SOC processes.

• Maintain incident reports, playbooks, documentation, and operational procedures.

What You Bring

• 3–5+ years of SOC, Incident Response, or Cyber Defense experience.

• Experience leading, mentoring, or supervising SOC analysts is highly preferred.

• Strong hands-on experience with SIEM and security monitoring tools.

• Knowledge of threat detection, network security, malware analysis, incident response, and threat hunting.

• Ability to perform effectively during high-priority security incidents.

• Strong analytical, communication, and cross-functional coordination skills.

• Experience with CrowdStrike Falcon is a strong advantage.

• Exposure to Splunk, Microsoft Sentinel, QRadar, Google SecOps, or similar SIEM platforms.

• Python or PowerShell scripting experience is a plus.

• Cloud security monitoring experience across AWS, Azure, or GCP is advantageous.

• Security certifications such as Security+, CEH, GCIH, or GCIA are a plus.

• Must currently be in the Philippines with the legal right to live and work in the country.

• Willing to work hybrid in Cubao with a shifting schedule.

​

Ready to lead L2 incident response and strengthen enterprise cyber defense? Submit your updated CV highlighting your SOC, SIEM, incident response, threat hunting, and leadership experience, together with the required details above.