Associate Security Analyst

Hammerjack Pty Ltd; Dumaguete; On-site; PHP 420,000 - 620,000; Full time

Job summary

Hammerjack Pty Ltd is seeking an Associate SOC Analyst to monitor and respond to security incidents using SIEM, EDR, SOAR, and other security tools. The role includes 24/7 shift work to protect internal and customer IT infrastructure.

You will analyze alerts, investigate incidents, document findings, and collaborate with the team to ensure timely resolution while continuously learning about evolving threats and technologies.

Qualifications

• You are service minded and a team-player.
• You are structured, detail-oriented and take pride in work quality.
• You can communicate your professional knowledge to end-users as well as experts.
• You are self-driven and solution-oriented.
• You have strong analytical and critical thinking skills to quickly assess and respond to security incidents.
• You have a basic understanding of DNS, TCP/IP networks and protocols.
• You have a basic understanding of security tools: Antivirus, IDS/IPS, SIEM, SOAR and Vulnerability Management.
• You have a basic knowledge of cloud platforms (Azure, AWS).
• You are keen to learn, taking part in trainings and certifications.
• You are fluent in English – both spoken and written.
• You are willing to work in 24/7 rotation

Responsibilities

• Monitor security alerts and events using defined tools to detect threats.
• Prioritize alerts based on severity and impact.
• Investigate incidents, identify root causes, and take appropriate actions.
• Escalate incidents to higher-level analysts when needed.
• Document and track incidents in the ITSM system for timely recording.
• Collaborate with team members to ensure timely resolution.
• Perform basic threat analysis and use threat intelligence to enhance detection.
• Operate and maintain security monitoring tools and suggest configuration improvements.
• Communicate findings and incident details to team and stakeholders.
• Generate regular reports on security incidents and monitoring activities.
• Participate in ongoing training to stay up-to-date with threats and tools.

Skills

Team player

Structured / detail-oriented

Analytical thinking

Communication

Self-driven

Willing to learn

Tools

SIEM

SOAR

EDR

Vulnerability Management

Antivirus

IDS/IPS

Cloud platforms (Azure, AWS)

Job description

The Associate SOC Analyst will be responsible for monitoring and responding to security incidents using various security tools such as SIEM (Security Information and Event Management), AV (Antivirus), Endpoint Detection and Response (EDR), VM (Vulnerability Management), TI (Threat Intelligence) and SOAR (Security Orchestration and Automatic Response).

• Be ensuring that internal and customer's IT infrastructure remains secure.
• The role involves incident detection, analysis, and response, as well as continuous monitoring for threats.
• As an Associate SOC Analyst, you will be required to work in a 24/7 shift rotation, including nights, weekends, and holidays.

Minimum Requirements

The minimum required skills (education and experience) are:

• You are service minded and a team-player
• You are structured, detail-oriented and put an honor in the quality of your work
• You can communicate your professional knowledge to end-users as well as experts
• You are self-driven and solution-oriented
• You have strong analytical and critical thinking skills to quickly assess and respond to security incidents
• You have a minimum understanding in DNS, TCP/IP networks and protocols
• You have a minimum understanding in Antivirus, IDS/IPS, SIEM, SOAR and Vulnerability Management tools
• You have a basic knowledge of cloud platforms (Azure, AWS)
• You are keen to learn, taking part in trainings and certifications
• You are fluent in English – both spoken and written
• You are willing to work in 24/7 rotation Job Responsibilities

The responsibilities of this job are to:

• Security Monitoring:
• Continuously monitor security alerts and events using tools defined in Section 2 in this document to detect potential security threats.
• Analyze and prioritize alerts based on the severity and impact of the potential threat.
• Incident Detection and Response:
• Investigate security incidents, identify the root cause, and take appropriate actions based on established procedures.
• Escalate incidents to higher-level analysts or other teams when necessary.
• Incident Management:
• Document and track security incidents within the ITSM system, ensuring accurate and timely recording of all relevant information.
• Collaborate with team members to ensure incidents are resolved in a timely manner.
• Threat Analysis:
• Conduct basic threat analysis to understand the nature of identified threats and potential risks to the organization.
• Utilize available threat intelligence to enhance detection capabilities.
• Security Tools Operation:
• Operate and maintain security monitoring tools defined in Section 2 in this document, ensuring they function optimally.
• Provide input on tool configurations to enhance detection and response capabilities.
• Communication and Reporting:
• Communicate findings and incident details to team members and other stakeholders as needed.
• Generate regular reports on security incidents and monitoring activities.
• Continuous Learning:
• Participate in ongoing training to stay up-to-date with the latest cybersecurity threats, trends, and tools.
• Engage in knowledge sharing within the team to improve collective expertise.