Hybrid SOC Analyst: Cloud & SIEM Defender

Cloudstaff Philippines Inc.; Philippines; On-site; PHP 400,000 - 600,000; Full time

Benefits offered by this job

Comprehensive health insurance

Flexible leave credits

Company-provided PC/Laptop

Job summary

Cloudstaff Philippines Inc. is seeking a Security Operations Centre (SOC) Analyst to monitor and triage security alerts across the SIEM platform and cloud services. You will work with Microsoft 365, Azure and AWS, triaging alerts, escalating incidents and tracking endpoint signals.

The role emphasizes accurate incident documentation, shift handovers and participation in exercises. Strong English written communication and experience with SIEM tools are essential.

Qualifications

• Demonstrated experience monitoring and triaging alerts in a SIEM platform.
• Ability to classify alert severity and manage incident workflows.
• Experience with AWS and Azure cloud environments.
• Experience with Microsoft 365 Entra ID sign-in and audit signals.
• Knowledge of EDR and vulnerability management concepts.
• Strong written English and incident record-keeping.

Responsibilities

• Triage alerts in SIEM and escalate incidents per the matrix.
• Monitor Microsoft Entra ID, 365, AWS CloudTrail and GuardDuty.
• Classify alert severity, run incident workflows.
• Triage EDR alerts and track endpoint coverage gaps.
• Track vulnerabilities and patches across Azure and AWS.
• Maintain triage notes, incident records and shift handover.

Skills

SIEM monitoring

Alert triage

AWS & Azure

Entra ID signals

EDR concepts

Vulnerability management

English communication

Tools

Rapid7

Microsoft Defender for Endpoint

CrowdStrike

Netskope

Cloudflare

LastPass

Job description

Cloudstaff Philippines Inc. is seeking a Security Operations Centre (SOC) Analyst to monitor and triage security alerts across the SIEM platform and cloud services. You will work with Microsoft 365, Azure and AWS, triaging alerts, escalating incidents and tracking endpoint signals.

The role emphasizes accurate incident documentation, shift handovers and participation in exercises. Strong English written communication and experience with SIEM tools are essential.