GSOC Level 2 Analyst & Shift Lead – Incident Response

WTW; Philippines; On-site; PHP 700,000 - 1,100,000; Full time

Job summary

WTW is seeking a Cyber Defence - GSOC Level 2 Analyst to monitor and investigate security incidents from the Taguig/Philippines region. The role emphasizes timely response, thorough log analysis, and collaboration with cross-functional teams to protect critical data and assets.

You will act as an L2 escalation point, lead shift tasks, mentor junior analysts, and contribute to SOC process improvements, ensuring high-quality incident handling and clear leadership communication.

Qualifications

• Experience in a mature cyber defence/ SOC environment.
• Strong ability to triage and investigate security incidents.
• Ability to communicate clearly with both technical and non-technical stakeholders.

Responsibilities

• Investigate security incidents and detect threats via log analysis using SIEM/UEBA/EDR.
• Lead/L2 escalation and coordinate with L3 and other teams.
• Prepare end-of-shift reports and handover communications to the next shift.

Skills

Team collaboration

Communication skills

Time management

Mentorship

Analytical thinking

Leadership

Problem solving

Curiosity / self-development

Tools

SIEM

UEBA

EDR

Linux

Windows

MacOS

Job description

WTW is seeking a Cyber Defence - GSOC Level 2 Analyst to monitor and investigate security incidents from the Taguig/Philippines region. The role emphasizes timely response, thorough log analysis, and collaboration with cross-functional teams to protect critical data and assets.

You will act as an L2 escalation point, lead shift tasks, mentor junior analysts, and contribute to SOC process improvements, ensuring high-quality incident handling and clear leadership communication.