Blue Team SIEM Analyst – Threat Detection & Response

VIATechnik; Makati; Presencial; PHP 700.000 - 1.200.000; Jornada completa

Descripción de la vacante

VIATechnik is seeking a Blue Team Security Analyst to monitor security events, investigate threats, and strengthen our security posture in Manila. You will work across endpoints, networks, cloud services, and identity platforms to detect and respond to incidents before they impact the business.

You will collaborate with IT teams to drive remediation, improve detection rules, and support continuous security improvement while following MITRE ATT&CK guidelines and industry best practices.

Formación

• Bachelor's degree or equivalent practical experience.
• Minimum 3 years in Security Operations (SOC), Blue Team, incident investigations or vulnerability management.
• Hands-on with SIEM and centralized log management platforms.
• Experience performing vulnerability assessments and remediation tracking.
• Strong understanding of Windows, Linux, AD, Microsoft 365, IAM.

Responsabilidades

• Monitor and analyze security events from SIEM, firewalls, endpoints, cloud apps.
• Investigate and triage security incidents, escalate with impact assessments.
• Conduct authorized vulnerability assessments and prioritize fixes.
• Coordinate remediation with sysadmins and IT teams.
• Prepare security reports, dashboards, and remediation progress updates.
• Maintain playbooks and improve logging, monitoring, and controls.

Conocimientos

Security Operations

Blue Team

Incident Investigation

Vulnerability Management

Security Monitoring

SIEM

Windows

Linux

IAM

MITRE ATT&CK

Educación

Bachelor's Degree in IT / Cybersecurity / CS

Herramientas

Microsoft Defender

Microsoft Sentinel

Fortinet

Sophos

Splunk

Wazuh

Microsoft Intune

AWS

UniFi

Synology NAS

Nessus

Qualys

Rapid7

PowerShell

Python

Bash

Descripción del empleo

VIATechnik is seeking a Blue Team Security Analyst to monitor security events, investigate threats, and strengthen our security posture in Manila. You will work across endpoints, networks, cloud services, and identity platforms to detect and respond to incidents before they impact the business.

You will collaborate with IT teams to drive remediation, improve detection rules, and support continuous security improvement while following MITRE ATT&CK guidelines and industry best practices.