Associate Security Analyst

itm8 PH; Dumaguete; On-site; PHP 420,000 - 680,000; Full time

Job summary

itm8 PH is seeking an Associate SOC Analyst to monitor security events and respond to incidents using SIEM, EDR, VM, TI and SOAR. The role involves detecting and analyzing incidents and continuous monitoring to protect IT infrastructure for the company and customers.

You will work in a 24/7 shift rotation, including nights, weekends, and holidays, collaborating with a team to improve security operations and knowledge sharing.

Qualifications

• Fluent in English, both spoken and written.

Responsibilities

• Security Monitoring: Continuously monitor security alerts and events using tools defined to detect potential threats.

Skills

DNS & TCP/IP

SIEM / SOAR

Antivirus / IDS/IPS

Cloud platforms

Analytical thinking

Communication skills

Team player

English fluency

24/7 shift readiness

Tools

SOAR platform

Vulnerability Management tools

EDR / Antivirus

Job description

The Associate SOC Analyst will be responsible for monitoring and responding to security incidents using various security tools such as SIEM (Security Information and Event Management), AV (Antivirus), Endpoint Detection and Response (EDR), VM (Vulnerability Management), TI (Threat Intelligence) and SOAR (Security Orchestration and Automatic Response).

• Be ensuring that internal and customer's IT infrastructure remains secure.
• The role involves incident detection, analysis, and response, as well as continuous monitoring for threats.
• As an Associate SOC Analyst, you will be required to work in a 24/7 shift rotation, including nights, weekends, and holidays.

Minimum Requirements

• You are service minded and a team-player
• You are structured, detail-oriented and put an honor in the quality of your work
• You can communicate your professional knowledge to end-users as well as experts
• You are self-driven and solution-oriented
• You have strong analytical and critical thinking skills to quickly assess and respond to security incidents
• You have a minimum understanding in DNS, TCP/IP networks and protocols
• You have a minimum understanding in Antivirus, IDS/IPS, SIEM, SOAR and Vulnerability Management tools
• You have a basic knowledge of cloud platforms (Azure, AWS)
• You are keen to learn, taking part in trainings and certifications
• You are fluent in English - both spoken and written
• You are willing to work in 24/7 rotation

Job Responsibilities

The responsibilities of this job are to:

• Security Monitoring:
  • Continuously monitor security alerts and events using tools defined in Section 2 in this document to detect potential security threats.
  • Analyze and prioritize alerts based on the severity and impact of the potential threat.
• Incident Detection and Response:
  • Investigate security incidents, identify the root cause, and take appropriate actions based on established procedures.
  • Escalate incidents to higher-level analysts or other teams when necessary.
• Incident Management:
  • Document and track security incidents within the ITSM system, ensuring accurate and timely recording of all relevant information.
  • Collaborate with team members to ensure incidents are resolved in a timely manner.
• Threat Analysis:
  • Conduct basic threat analysis to understand the nature of identified threats and potential risks to the organization.
  • Utilize available threat intelligence to enhance detection capabilities.
• Security Tools Operation:
  • Operate and maintain security monitoring tools defined in Section 2 in this document, ensuring they function optimally.
  • Provide input on tool configurations to enhance detection and response capabilities.
• Communication and Reporting:
  • Communicate findings and incident details to team members and other stakeholders as needed.
  • Generate regular reports on security incidents and monitoring activities.
• Continuous Learning:
  • Participate in ongoing training to stay up-to-date with the latest cybersecurity threats, trends, and tools.
  • Engage in knowledge sharing within the team to improve collective expertise.