Hybrid SOC Analyst: Security Operations & Incident Response

Refinitiv; Manila; Hybrid; PHP 600,000 - 1,000,000; Full time

Benefits offered by this job

Hybrid Work Model

Career Development and Growth

Mental Health Days off

Headspace app

Tuition reimbursement

Volunteer days

Job summary

Thomson Reuters seeks a Security Operations Analyst to monitor, investigate, and respond to security events across enterprise systems, networks, and cloud environments. You will analyze alerts from SIEM/EDR, perform malware analysis, and document investigations for incident response.

The role involves collaboration with ISRM to improve detection, workflows, and automation. The position requires a Bachelor's degree and 1–3 years in a SOC or similar setting, with hybrid onsite responsibilities and

Qualifications

• Bachelor's degree in a related field.
• 1–3 years in SOC or equivalent cybersecurity operations.
• Experience conducting security investigations across OS, networks, cloud, apps, endpoints.
• Working knowledge of networking, workstations, servers, OS.
• Experience with SIEM, EDR, antivirus, forensic tools, firewalls, or cloud-security tools.
• Knowledge of cyberattack techniques, defensive controls, and incident-response practices.
• Strong analytical and critical-thinking skills.
• Ability to make timely decisions and work independently in a fast-paced environment.
• Ability to adapt to evolving threats, technologies, priorities, and operational requirements.
• Commitment to continual learning and professional development.

Responsibilities

• Monitor enterprise security events and respond to incidents across a global network environment.
• Detect, analyze, and triage alerts from SIEM, IDS, and security tools.
• Conduct end-to-end security investigations across systems and cloud environments.
• Perform malware analysis using open-source and vendor tools.
• Document investigations and create incident briefings and reports.
• Collaborate with ISRM teams to improve detection, alerting, and response workflows.
• Create and maintain standard operating procedures for consistent operations.

Skills

Analytical thinking

Decision making

Independent learner

Threat detection

Incident response

Education

Bachelor's degree

Bachelor's degree in Cybersecurity/IT/CS or related

Tools

SIEM

EDR

antivirus

forensic tools

firewalls

cloud security tools

Job description

Thomson Reuters seeks a Security Operations Analyst to monitor, investigate, and respond to security events across enterprise systems, networks, and cloud environments. You will analyze alerts from SIEM/EDR, perform malware analysis, and document investigations for incident response.

The role involves collaboration with ISRM to improve detection, workflows, and automation. The position requires a Bachelor's degree and 1–3 years in a SOC or similar setting, with hybrid onsite responsibilities and