SOC Team Lead L2

Gratitude Inc

43 Views

2 days ago

SOC Team Lead L2

3-5 Year(s)

₱ 65 - ₱ 200K p.m

Manila (Cubao Quezon City)

Job Description

Key Skills

Security Cyber Security SIEM tools python programming Hands-on experience with SIEM platforms such as Splunk, Sentinel, QRadar, Google SecOps, or similar.

0 candidate(s) have already applied for this Job. Apply now

JOB TITLE: SOC L2
WORK SETUP: Hybrid in Cubao
WORK SHIFT: Shifting

Lead Incident Response. Strengthen Cyber Defense.
Join Cybersecurity team as a SOC Team Lead (L2) and play a key role in detecting, investigating, and responding to advanced security threats. This role is ideal for experienced SOC professionals who enjoy leading analysts, driving incident response efforts, and continuously improving security operations.

What You'll Do
Lead the investigation and resolution of complex security incidents escalated by L1 analysts.
Perform root cause analysis, threat validation, and incident triage across enterprise environments.
Act as a key responder during high-severity incidents, coordinating with CSIRT, engineering teams, and stakeholders.
Conduct threat hunting activities using indicators of compromise (IoCs) and threat intelligence.
Mentor and guide SOC analysts through coaching, quality reviews, and incident handling best practices.
Collaborate with detection engineering teams to improve use cases, alert quality, and SOC processes.
Maintain incident documentation, reports, playbooks, and operational procedures.

What We're Looking For
3–5+ years of experience in a SOC, Incident Response, or Cyber Defense environment.
Previous experience leading, mentoring, or supervising SOC analysts is highly preferred.
Strong hands-on experience investigating security incidents using SIEM and security monitoring tools.
Knowledge of network security, threat detection, malware analysis, incident response, and threat hunting.
Experience analyzing logs, network traffic, and security events across enterprise environments.
Ability to work effectively during high-priority security incidents and coordinate cross-functional response efforts.

Preferred Qualifications
Experience with CrowdStrike Falcon (highly preferred).
Hands-on experience with SIEM platforms such as Splunk, Sentinel, QRadar, Google SecOps, or similar.
Scripting experience using Python or PowerShell for automation and investigations.
Certifications such as Security+, CEH, GCIH, GCIA, or similar.
Exposure to cloud security monitoring across AWS, Azure, or GCP.

Work Setup
Hybrid work arrangement
Cubao office location
Amenable to possible shifting schedules
Additional details:
Open for those applicants who are currently in Philippines and already have the right to live and work in this country are eligible for this role

RECRUITMENT PROCESS:
• Screening with CV Reviewer
• Endorse for Validation and further CV screening through Workday, along with the HRI toolkit, F

PRE-SCREENING QUESTIONS:
How many years of experience do you have in a SOC, Incident Response, or Cyber Defense environment?
Have you led, mentored, supervised, or guided SOC analysts?
What is your level of hands-on experience with SIEM platforms?
What is your last drawn salary?
How much is your salary expectation?
Are you willing to work in a hybrid setup in Cubao with a shifting schedule?
Notice period

Role

Security

Timings

Day Shift (Permanent)

Industry

BPO

Work Mode

Hybrid

Process

Voice

Functional Area

IT Software/Hardware

Note: Myglit doesn't charge any money from candidates. If you have been asked to pay money to get this job then report to us immediately at support@myglit.com.

Tolulope Edun

Recruiter - Gratitude Inc

NA, nigeria

3+ Followers

500+ Posts

View Profile

Interview Tips

Giving the VNA round?
What are the most important skills you acquired as a Soft Skills/VNA trainer?
How would you handle an irate customer?

Get the Best Jobs
on your Fingertips

₱ 80 - ₱ 87.15K p.m

Manila, Philippines

Details