Hybrid SOC Analyst - Security Operations and Threat Response

Thomson Reuters; Manila; Hybrid; PHP 600,000 - 840,000; Full time

Benefits offered by this job

Hybrid Work Model

Flex My Way

Job summary

Thomson Reuters is seeking a Security Operations Analyst to protect our global technology environment. You will monitor, investigate, and respond to security events across enterprise systems, networks, cloud environments, and applications, working within the ISRM team.

You will document investigations, perform malware analysis, and collaborate to improve detection and incident-response workflows while maintaining SOPs and supporting 24/7 operations in a hybrid role.

Qualifications

• Bachelor's degree in a related field or equivalent experience.
• Hands-on SOC/IR experience with enterprise environments.
• Knowledge of SIEM, EDR, firewalls, and cloud security tools.
• Ability to analyze threats and perform end-to-end investigations.

Responsibilities

• Monitor security events across global networks and respond to incidents.
• Triage alerts from SIEM/EDR and conduct investigations across OS, networks, cloud, and endpoints.
• Perform malware analysis using open-source and vendor tools.
• Document investigations and prepare incident briefings and reports.
• Collaborate with ISRM to improve detection, alerting, and automation workflows.
• Create and maintain standard operating procedures for SOC operations.
• Work a hybrid schedule with on-site days and rotating shifts.

Skills

SOC experience

Incident response

SIEM tools

EDR tools

Malware analysis

Networking basics

Analytical thinking

Education

Bachelor's degree

Cybersecurity degree preferred

Tools

Forensic tools

Firewalls

Cloud security tools

SOAR platforms

Job description

Thomson Reuters is seeking a Security Operations Analyst to protect our global technology environment. You will monitor, investigate, and respond to security events across enterprise systems, networks, cloud environments, and applications, working within the ISRM team.

You will document investigations, perform malware analysis, and collaborate to improve detection and incident-response workflows while maintaining SOPs and supporting 24/7 operations in a hybrid role.