Security Operations Center Analyst

Position: Security/SOC Analyst

Job Type: Permanent

Work Setup: Full Onsite

Location: Cebu

Shift Time: US Day shift 9am - 6pm EST / US Night shift (6pm EST - 3am EST and the other one would be 12am - 9am EST)

Role Summary:

We are seeking an experienced Security Analyst to support Security Operations Center activities, including real-time security monitoring, incident detection, investigation, response, vulnerability assessment, and security event analysis. You will work closely with infrastructure, network, server, and application teams to identify, investigate, contain, and remediate security threats while ensuring incidents are addressed within defined SLAs.

Key Responsibilities:

• Monitor and analyze security alerts and events generated from SIEM, EDR, firewalls, IDS/IPS, proxy servers, antivirus solutions, databases, applications, Windows/Linux servers, and other network security devices.

• Perform end-to-end security incident investigation and determine whether security events represent false positives or true security incidents.

• Use SIEM platforms, particularly IBM QRadar and/or Splunk, to identify potential security breaches, correlate events, analyze logs, and investigate suspicious activity.

• Perform root cause analysis and manage incidents in accordance with established Incident Response and Incident Management frameworks.

• Monitor network traffic and security logs to identify anomalous behavior, attempted compromises, and potentially malicious activity.

Experience: 3 to 6 Years

Mandatory Skills:

• SIEM, EDR, firewalls, IDS/IPS

• root cause analysis and manage incidents

• monitor network traffic and security logs

• Fresh service/Similar ticketing tool

• Conduct vulnerability assessments

• operational reports.