IT Security Analyst (Intermediate to Senior) - Leading Multinational Company

PFCC Group; Manila; On-site; PHP 900,000 - 1,700,000; Full time

Job summary

PFCC Group in the Philippines seeks a senior SOC/Incident Response specialist to lead escalated security investigations, analyze logs, and mentor CSOC Analysts. You will tune SIEM/EDR tools, perform threat hunting, and coordinate with infrastructure and security teams to strengthen controls.

The ideal candidate has 5-8+ years in cybersecurity, 4-5 years in SOC/IR, a CS/InfoSec degree, and at least one cert (Security+, CEH, or GSEC). Strong scripting and communication skills are essential.

Qualifications

• 5-8+ years in cybersecurity/IT.
• Minimum 4-5 years in SOC or Incident Response.
• Degree in Computer Science, Information Security, or equivalent.

Responsibilities

• Lead advanced investigations on escalated security incidents.
• Perform root cause, scope, and impact analysis; document findings.
• Guide and mentor CSOC Analysts to improve triage quality.

Skills

Incident response

Security analytics

SIEM & EDR tuning

Threat hunting

Digital forensics

Malware analysis

Python/PowerShell

Network protocols

Packet capture (Wireshark)

Communication skills

Education

Degree in Computer Science or Information Security

Security+ CEH GSEC or equivalent

Tools

Splunk

QRadar

ArcSight

EDR solutions

Wireshark

Job description

Our client is recognized for its innovation, cutting-edge technology, and strong commitment to security, integrity, and employee development. You’ll be joining a collaborative global environment where continuous improvement, learning, and career growth are supported and encouraged.

Key Responsibilities:

• Lead advanced investigations on escalated security incidents, analyzing logs across firewalls, network devices, web proxies, IDS/IPS, AV and EDR platforms.
• Perform root cause, scope, and impact analysis; develop containment and remediation steps; document findings throughout the incident lifecycle.
• Guide and mentor CSOC Analysts to improve triage quality and event handling.
• Tune and optimize SIEM and EDR tools to reduce false positives and enhance detection accuracy.
• Conduct proactive threat hunting and leverage threat intelligence to identify suspicious activity and emerging threats.
• Support forensic and malware analysis activities as needed.
• Prepare incident reports and communicate findings to management and stakeholders.
• Contribute to the development and enhancement of incident response playbooks, procedures, and SOC processes.
• Collaborate with infrastructure and security teams to address vulnerabilities and strengthen security controls.
• Participate in post-incident reviews to identify gaps and drive continuous improvement.
• Serve as a technical escalation point for complex or high-severity incidents.
• Strong understanding of core network protocols (TCP/IP, DNS, FTP, etc.) and network traffic analysis.
• Proficient in packet capture and analysis tools (e.g., Wireshark) and netflow analysis.
• Hands-on experience with SIEM platforms (Splunk, QRadar, ArcSight) and EDR solutions.
• Solid working knowledge of Windows, Linux, and UNIX environments.
• Experience using threat intelligence platforms and applying intel to proactive detection.
• Familiarity with exploit techniques, common vulnerabilities, and attack vectors.
• Strong understanding of the incident response lifecycle, digital forensics, and malware analysis fundamentals.
• Scripting or automation capability (e.g., Python, PowerShell) to enhance detection or workflow efficiency.
• Strong analytical, communication, and problem-solving skills; ability to handle multiple priorities effectively.

Requirements:

• 5-8+ years in cybersecurity or IT, including minimum 4-5 years in SOC or Incident Response.
• Degree in Computer Science, Information Security, or equivalent experience.
• At least one relevant certification (Security+, CEH, GSEC, or equivalent).

About PFCC:

We partner with the world’s most sophisticated financial institutions to unlock sustainable value. By merging operational excellence with the power of AI and digital transformation, we ensure our clients are equipped to lead, not just keep pace.

Bridging the Gap between Vision and Technical Mastery, we believe that even the most advanced strategy is only as powerful as the people executing it. That is why we specialize in identifying and placing high-calibre technical talent within the world’s premier financial ecosystems. Whether it’s securing mission-critical infrastructure or driving global digital shifts, we connect elite IT professionals with opportunities at global financial leaders.