SOC Engineer

Responsible for continuous network and endpoint intrusion detection, alert triage, and real time incident response. This role enhances visibility gaps left by endpoint-only protection by providing active intrusion monitoring and analysis using SIEM, IDS/IPS logs, and firewall telemetry.

• Monitor network and system alerts from SIEM, IDS/IPS, and EDR dashboards.
• Detect, investigate, and respond to suspicious or unauthorized network activity.
• Correlate firewall logs, endpoint events, and system alerts to detect lateral movement.
• Coordinate with the SOC Engineer for IDS/IPS tuning and log source optimization.
• Execute containment playbooks for confirmed intrusions.
• Document all incidents per SOC2 evidence and incident response procedures.
• Provide daily shift handover reports.

Qualifications

• Graduate of IT related course
• With at least 2 years experience with the same role
• Familiarity with IDS/IPS tools, SIEM platforms, and firewall technologies.
• Knowledge of TCP/IP, DNS, and packet analysis tools (Wireshark, Zeek, Suricata).
• Ok to work onsite in Ortigas and Cubao
• Ok to work in any shift schedule