Team Lead (L2) - Cybersecurity

NOW HIRING: SOC Team Lead (L2) – Cybersecurity

Work Setup: Hybrid – Cubao

Work Schedule: Shifting

Salary: Confidential – To be discussed during the Job Offer

Company: Accenture Cybersecurity

Location: Cubao, Philippines

Lead Incident Response. Strengthen Cyber Defense.

Are you an experienced SOC professional ready to take the lead in defending enterprise environments against sophisticated cyber threats?

Join Accenture’s Cybersecurity team as a SOC Team Lead (L2) and lead advanced security investigations, incident response, threat hunting, and SOC operations. This is an excellent opportunity for professionals who enjoy solving complex security incidents while mentoring and developing other SOC analysts.

What You'll Do

• Lead the investigation, triage, and resolution of complex security incidents escalated by L1 analysts.
• Perform root cause analysis, threat validation, and incident investigation across enterprise environments.
• Serve as a key responder during high-severity security incidents .
• Coordinate incident response activities with CSIRT, engineering teams, and business stakeholders .
• Conduct proactive threat hunting using Indicators of Compromise (IoCs), threat intelligence, and security telemetry.
• Analyze logs, network traffic, alerts, and security events to identify potential threats.
• Mentor and coach SOC analysts through quality reviews, case handling, and incident response best practices.
• Collaborate with Detection Engineering teams to enhance security use cases, alert quality, and detection capabilities .
• Maintain accurate incident reports, documentation, playbooks, and operational procedures .
• Identify opportunities to continuously improve SOC processes, workflows, and security operations.

What We're Looking For

• 3–5+ years of experience in a SOC, Incident Response, Cyber Defense, or related cybersecurity environment.
• Previous experience leading, mentoring, or supervising SOC analysts is highly preferred.
• Strong hands-on experience investigating security incidents using SIEM and security monitoring tools .
• Solid knowledge of:
  
  • Network Security
  • Threat Detection
  • Incident Response
  • Threat Hunting
  • Malware Analysis
  • Security Event Investigation
• Experience analyzing enterprise logs, network traffic, and security alerts .
• Strong analytical and problem-solving skills.
• Ability to remain effective and make sound decisions during high-priority security incidents .
• Excellent communication and coordination skills when working with cross-functional teams.

⭐ Preferred Qualifications

• Experience with CrowdStrike Falcon is highly preferred.
• Hands-on experience with SIEM platforms such as:
  
  • Splunk
  • Microsoft Sentinel
  • IBM QRadar
  • Google SecOps
  • or similar platforms
• Scripting experience using Python or PowerShell .
• Cybersecurity certifications such as:
  
  • Security+
  • CEH
  • GCIH
  • GCIA
  • or equivalent certifications
• Exposure to cloud security monitoring across AWS, Azure, or GCP .

Important Eligibility Requirement

This opportunity is open to applicants currently residing in the Philippines who already have the legal right to live and work in the country .

Why Join?

Take your cybersecurity career to the next level by working in an environment where your expertise in incident response, threat detection, and cyber defense can make a real impact.

If you're ready to lead SOC operations, tackle complex security threats, and grow as a cybersecurity leader , this could be your next career move!

Interested? Send your updated CV/resume and apply now!