Skip to content

Leadership

Security Operations Lead

CyberOne logoCyberOneRemote in PhilippinesFull-timePosted 1d ago
Apply on CyberOne (shows the role here)CyberOne as an employer: salaries and roles

The full posting

About CyberOne

CyberOne is a pure-play Microsoft security partner dedicated to helping enterprises realise the full value of the Microsoft Security portfolio - across Defender XDR, Sentinel, Entra, Purview, Intune, Copilot for Security and more. We combine deep technical expertise with outcome-driven services that accelerate secure cloud adoption, modernise threat protection and simplify compliance.

Job Title:Security Operations Lead

Location: Remote

Employment Type: Full-time

Reports to: Senior SecOps Lead

Schedule: **** Rotational Shift

The Role

The SecOps Lead is responsible for the day-to-day operational management of the Security Operations Centre. The role ensures investigations are managed effectively, operational priorities are met, and analysts receive the technical guidance and support required to deliver high-quality security services. The SecOps Lead coordinates incident response activities, maintains service quality, and acts as the operational escalation point for the SOC.

Responsibilities

  • Coordinate daily SOC operations and manage analyst workloads.
  • Provide operational oversight of ongoing investigations and customer requests.
  • Review investigations to ensure quality, consistency, and adherence to established procedures.
  • Support analysts by providing technical guidance and removing operational blockers.
  • Coordinate response activities for high-priority and major incidents.
  • Act as the operational escalation point for customer incidents and service delivery matters.
  • Conduct monthly 1-2-1s, coaching and review of KPIs.
  • Monitor service performance against agreed service levels (SLAs).
  • Facilitate shift handovers and ensure continuity of investigations.
  • Promote knowledge sharing and continuous improvement across the SOC.
  • Support customer service reviews and operational meetings where required.

Where you can be based

This position is 100% remote and open to applicants based in Philippines.

Text as CyberOne published it; last compared with the original on 13 Nov 2026.

Apply on CyberOne (shows the role here)

The application

Your details and CV, then 3 questions (1 written).

Keep these to handCVOther files (optional)Cover letter (optional)
  1. 1.
    Are you based in the PhilippinesYes or no
  2. 2.
    When are you available to start?Short answer
  3. 3.
    What is your expected salary?Written answer

Taken from CyberOne's application form as it stood on 13 Nov 2026.

The employer: CyberOne

CyberOne runs managed detection, incident response and consulting on Microsoft security tools, and is filling SOC, incident response and engineering roles in London and Manila.

Pay and benefits: Full-time staff roles; the SOC posts in the Philippines run on rotational shifts.

Full postings from CyberOne All CyberOne openings on the board CyberOne employer profile

Other security roles worth a look

Run a security team before?

Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.

Create my profile

Hear first when CyberOne posts a security role

We read CyberOne's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.