Cyber Incident Response Specialist

Philtech Inc.; Taguig; On-site; PHP 360,000 - 720,000; Full time

Job summary

Albertsons Companies is seeking a Security Operations Center Analyst to join a 24/7 team focused on security operations and incident response. You will analyze logs, respond to events, and document procedures to support continuous improvement.

You will work with SIEM/EDR/SOAR tools, coordinate with internal teams and MSSP partners, and help ensure SLAs are met while protecting critical assets.

Qualifications

• Expert level knowledge of information technology systems and processes.
• Proven analytical, problem solving and troubleshooting skills.
• Ability to quickly learn and apply new concepts.
• Experience with security operations technologies (SIEM/EDR/SOAR).

Responsibilities

• Perform log analysis and correlate datasets to identify anomalies.
• Respond to security events, drive issues to closure with stakeholders.
• Document security processes and procedures.
• Support intake of service requests and communicate promptly with requestors.
• Enforce security policies, standards and procedures.
• Stay updated on security technologies, trends, and best practices.
• Participate in Incident Response activities and investigations.
• Detect, analyze, and respond to cybersecurity threats.
• Coordinate with MSSP and internal/external teams during events.
• Ensure SLAs, KRIs, and KPIs are met for service delivery.
• Interface with CTI for detection development and threat updates.
• Work on Data Loss Prevention initiatives.
• Other duties as assigned; may include shift work in a 24/7 SOC.

Skills

IT systems knowledge

Cybersecurity fundamentals

Incident response

Tools

SIEM

EDR

SOAR

Firewall

Job description

Albertsons Companies is seeking a Security Operations Center Analyst to join a 24/7 team focused on security operations and incident response. You will analyze logs, respond to events, and document procedures to support continuous improvement.

You will work with SIEM/EDR/SOAR tools, coordinate with internal teams and MSSP partners, and help ensure SLAs are met while protecting critical assets.