Hybrid Cyber Security Analyst: SOC & Desktop Support

Concentrix Catalyst; Muntinlupa; Hybrid; PHP 600,000 - 900,000; Full time

Job summary

Concentrix Catalyst is seeking a hybrid Security Operations and Desktop Support professional to safeguard enterprise IT and OT environments. You will balance remote security monitoring with on-site technical support for office and industrial settings.

Key duties include monitoring security alerts, incident response, threat hunting, and managing Active Directory/Entra ID permissions while patching vulnerabilities across endpoints and servers.

Qualifications

• 2+ years in Cyber Security, SOC, or hybrid IT support.
• Manufacturing or industrial settings (OT, SCADA, or HMI) exposure preferred.
• Certifications preferred: Security+, CySA+, SC-200, AZ-500, or Network+.
• Strong analytical troubleshooting; ability to explain technical risks to non-technical stakeholders.

Responsibilities

• Security Ops (70%): Monitor, triage, and investigate security alerts (SIEM, EDR, Cloud). Lead incident response for phishing, malware, and unauthorized access.
• Desktop & Site Support (30%): Provide Level 2 technical support for workstations, industrial PCs (HMIs), and end-user hardware.
• Engineering & Hunting: Tune detection rules, perform proactive threat hunting using the MITRE ATT&CK framework, and assist with automation via PowerShell.
• Identity & Vulnerability: Manage Active Directory/Entra ID permissions and oversee vulnerability patching for endpoints and servers.
• Compliance: Maintain cyber hygiene and security standards across both office and manufacturing plant floors.

Skills

EDR/SIEM

Threat Hunting

Incident Response

Active Directory

Tools

CrowdStrike

Microsoft 365 Defender

SIEM platforms

Intune

SCCM

Azure

AWS

Rapid7

Qualys

Tenable

Entra ID

Job description

Concentrix Catalyst is seeking a hybrid Security Operations and Desktop Support professional to safeguard enterprise IT and OT environments. You will balance remote security monitoring with on-site technical support for office and industrial settings.

Key duties include monitoring security alerts, incident response, threat hunting, and managing Active Directory/Entra ID permissions while patching vulnerabilities across endpoints and servers.