SOC Team Lead (L2) / Security Information & Event Management (SIEM) Platform Operation | Hybrid in Cubao | ATCP-1335560-S423658

Gratitude Inc

54 Views

3 days ago

SOC Team Lead (L2) / Security Information & Event Management (SIEM) Platform Operation | Hybrid in Cubao | ATCP-1335560-S423658

3-5 Year(s)

Manila

Quick Apply Apply

Job Description

Key Skills

Network Security Python Splunk Powershell Global security monitoring analyst SIEM tools Cybersecurity Frameworks Security incident response Experience with CrowdStrike Falcon

13 candidate(s) have already applied for this Job. Apply now

SOC L2 – Security Operations / Cyber Defense

Location: Manila – Hybrid in Cubao
Work Setup: Hybrid
Work Shift: Shifting
Employment Type: Full-Time

Lead Incident Response. Strengthen Cyber Defense.

We are looking for an experienced SOC L2 professional to support advanced security monitoring, incident investigation, threat detection, and incident response activities across enterprise environments.

This role is ideal for experienced SOC and Cyber Defense professionals who can investigate complex security incidents, guide junior analysts, coordinate high-priority incident response, and continuously improve security operations.

Key Responsibilities

Lead the investigation and resolution of complex security incidents escalated by L1 analysts.
Perform root cause analysis, threat validation, and incident triage across enterprise environments.
Act as a key responder during high-severity security incidents.
Coordinate with CSIRT, engineering teams, and relevant stakeholders during incident response activities.
Conduct threat hunting using Indicators of Compromise (IoCs) and threat intelligence.
Mentor and guide SOC analysts through coaching, quality reviews, and incident-handling best practices.
Collaborate with detection engineering teams to improve security use cases, alert quality, and SOC processes.
Analyze security logs, network traffic, and security events across enterprise environments.
Maintain incident documentation, reports, playbooks, and operational procedures.
Contribute to continuous improvement of security monitoring and incident response processes.

Required Experience & Skills

3–5+ years of experience in a SOC, Incident Response, or Cyber Defense environment.
Previous experience leading, mentoring, or supervising SOC analysts is highly preferred.
Strong hands-on experience investigating security incidents using SIEM and security monitoring tools.
Strong knowledge of network security, threat detection, malware analysis, incident response, and threat hunting.
Experience analyzing logs, network traffic, and security events across enterprise environments.
Ability to work effectively during high-priority security incidents.
Strong communication and cross-functional coordination skills.

Preferred Qualifications

Experience with CrowdStrike Falcon is highly preferred.
Hands-on experience with SIEM platforms such as:
- Splunk
- Microsoft Sentinel
- IBM QRadar
- Google SecOps
- Other comparable SIEM platforms
Scripting experience using Python or PowerShell for automation and investigations.
Security certifications such as Security+, CEH, GCIH, GCIA, or equivalent.
Exposure to cloud security monitoring across AWS, Azure, or GCP.

Work Setup

Hybrid work arrangement.
Office location: Cubao, Manila.
Must be amenable to a shifting schedule.
Applicants must currently be based in the Philippines.
Applicants must already have the legal right to live and work in the Philippines.

Recruitment Process

Screening with CV Reviewer
Endorsement for validation and further CV screening through Workday, including the HRI toolkit, FCV, and CV
Client review

Pre-Screening Questions

How many years of experience do you have in a SOC, Incident Response, or Cyber Defense environment?
Have you led, mentored, supervised, or guided SOC analysts? Please provide details.
What is your level of hands-on experience with SIEM platforms? Please mention the platforms you have worked with.
Do you have hands-on experience with CrowdStrike Falcon or other EDR/XDR tools?
What is your experience with incident response, threat hunting, and security incident investigation?
What is your last drawn salary?
What is your expected salary?
Are you willing to work in a hybrid setup in Cubao with a shifting schedule?
What is your current notice period?

Important: Please ensure that the latest version of the candidate's CV is uploaded in PDF format, along with screening notes based on the requirements of the JD.

Role

Security

Timings

Rotational Shifts (Permanent)

Industry

IT-Software / Software Services

Work Mode

Hybrid

Process

Non-Voice

Functional Area

IT Software/Hardware

Note: Myglit doesn't charge any money from candidates. If you have been asked to pay money to get this job then report to us immediately at support@myglit.com.

Bibi Hukkeri

Recruiter - Gratitude Inc

NA, india

0+ Followers

500+ Posts

View Profile

Interview Tips

Giving the VNA round?
What are the most important skills you acquired as a Soft Skills/VNA trainer?
How would you handle an irate customer?

Get the Best Jobs
on your Fingertips

Confidential

Manila, Philippines

Details