Associate Security Analyst

itm8 Danmark; Lapu-Lapu; On-site; PHP 480,000 - 640,000; Full time

Job summary

itm8 Danmark is seeking an Associate SOC Analyst to monitor and respond to security incidents using SIEM, EDR, SOAR, and related tools. You will work to keep internal and customer IT infrastructure secure, perform incident detection and response, and participate in ongoing monitoring and learning.

The role requires 24/7 shift rotation, including nights and weekends. Strong English communication skills and a proactive, team-oriented mindset are essential for success.

Qualifications

• > You are service minded and a team-player
• "> You are structured, detail-oriented and take pride in quality of work
• "> You can communicate your professional knowledge to end-users as well as experts
• "> You are self-driven and solution-oriented
• "> You have strong analytical and critical thinking to quickly assess security incidents
• "> You have basic understanding of DNS, TCP/IP and protocols
• "> You have basic understanding of security tools: SIEM, SOAR, EDR, VM
• "> Basic knowledge of cloud platforms (Azure, AWS)
• "> Keen to learn, trainings and certifications
• "> Fluent in English – spoken and written
• "> Willing to work in 24/7 rotation

Responsibilities

• Security Monitoring: Continuously monitor alerts and events using defined tools to detect threats.
• ,
• ],
• CoT_job_summary_shortcolon

Skills

Team player

Structured

Communication

Self-driven

Analytical thinking

DNS basics

Security tools

Cloud knowledge

English fluency

24/7 shift

Tools

SIEM

SOAR

EDR

Vulnerability Management

IDS/IPS

Antivirus

Job description

The Associate SOC Analyst will be responsible for monitoring and responding to security incidents using various security tools such as SIEM (Security Information and Event Management), AV (Antivirus), Endpoint Detection and Response (EDR), VM (Vulnerability Management), TI (Threat Intelligence) and SOAR (Security Orchestration and Automatic Response).

• Be ensuring that internal and customer’s IT infrastructure remains secure.
• The role involves incident detection, analysis, and response, as well as continuous monitoring for threats.
• As an Associate SOC Analyst, you will be required to work in a 24/7 shift rotation, including nights, weekends, and holidays.

Minimum Requirements

• You are service minded and a team-player
• You are structured, detail-oriented and put an honor in the quality of your work
• You can communicate your professional knowledge to end-users as well as experts
• You are self-driven and solution-oriented
• You have strong analytical and critical thinking skills to quickly assess and respond to security incidents
• You have a minimum understanding in DNS, TCP/IP networks and protocols
• You have a minimum understanding in Antivirus, IDS/IPS, SIEM, SOAR and Vulnerability Management tools
• You have a basic knowledge of cloud platforms (Azure, AWS)
• You are keen to learn, taking part in trainings and certifications
• You are fluent in English – both spoken and written
• You are willing to work in 24/7 rotation

Job Responsibilities

• Security Monitoring:
• Continuously monitor security alerts and events using tools defined in Section 2 in this document to detect potential security threats.
• Analyze and prioritize alerts based on the severity and impact of the potential threat.
• Incident Detection and Response:
• Investigate security incidents, identify the root cause, and take appropriate actions based on established procedures.
• Escalate incidents to higher-level analysts or other teams when necessary.
• Incident Management:
• Document and track security incidents within the ITSM system, ensuring accurate and timely recording of all relevant information.
• Collaborate with team members to ensure incidents are resolved in a timely manner.
• Threat Analysis:
• Conduct basic threat analysis to understand the nature of identified threats and potential risks to the organization.
• Utilize available threat intelligence to enhance detection capabilities.
• Security Tools Operation:
• Operate and maintain security monitoring tools defined in Section 2 in this document, ensuring they function optimally.
• Provide input on tool configurations to enhance detection and response capabilities.
• Communication and Reporting:
• Communicate findings and incident details to team members and other stakeholders as needed.
• Generate regular reports on security incidents and monitoring activities.
• Continuous Learning:
• Participate in ongoing training to stay up-to-date with the latest cybersecurity threats, trends, and tools.
• Engage in knowledge sharing within the team to improve collective expertise.