Security Operations Center (SOC) Analyst

The Security Operations Center (SOC) Analyst is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats and security incidents across the organization's IT infrastructure, systems, networks, and endpoints.

Duties and Responsibilities:

1. Monitor and analyze security alerts and events generated from SIEM, firewalls, IDS/IPS, EDR, antivirus, and other security platforms.

2. Conduct continuous monitoring of network, endpoint, server, cloud, and security infrastructure to identify suspicious activities and potential security incidents.

3. Investigate security incidents including phishing, malware infections, unauthorized access attempts, account compromise, ransomware, and policy violations.

4. Perform alert triage, validation, escalation, and incident response activities following established SOC procedures and escalation matrix.

5. Analyze logs, network traffic, and endpoint activities to identify indicators of compromise (10Cs) and malicious behavior.

6. Support threat hunting activities to proactively identify hidden threats within the environment.

7. Assist in tuning SIEM correlation rules and reducing false positives to improve monitoring efficiency.

8. Participate in vulnerability monitoring, remediation tracking, and validation activities.

9. Coordinate with Infrastructure, Network, System Administration, and IT Operations teams during security investigations and incident remediation.

10. Maintain proper documentation of incidents, investigations, root cause analysis, and response actions.

11. Prepare daily, weekly, and monthly SOC operational and incident reports.

12. Ensure compliance with company security policies, operational procedures, and cybersecurity best practices.

QUALIFICATIONS

• Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, or related field

• Relevant cybersecurity certifications are an advantage

• Minimum of 2 years experience in Security Operations Center (SOC), Cybersecurity Operations, or Information Security

• Experience working with SIEM platforms such as FortiSIEM, Splunk, or equivalent

• Experience in incident detection, investigation, and response

• Knowledge in Windows, Linux, Active Directory, networking, and server administration

• Understanding of common cyber attack techniques including phishing, malware, ransomware, brute force attacks, and DDoS

• Experience in log analysis and event correlation

• Familiar with cybersecurity frameworks and standards such as NIST CSF and ISO 27001

• Strong analytical and problem-solving skills

• Good understanding of cybersecurity concepts and incident handling procedures

• Excellent oral and written communication skills

• Attention to detail and strong documentation skills

• Background in scripting. Python, or PowerShell is an advantage

Preferred Certifications:

• CompTIA Security+

• Fortinet NSE / FCF Certifications

• Certified SOC Analyst (CSA) or equivalent

• Certified Ethical Hacker (CEH) or equivalent

WORK ARRANGEMENT: FULL ONSITE IN BGC, TAGUIG | MON - FRI