Junior SOC Analyst - Grow in Threat Detection & Response

Expereo International; Taguig; On-site; PHP 300,000 - 540,000; Full time

Job summary

Expereo International is seeking a motivated Level 1 SOC Analyst with 1–2 years of security operations experience to join our Security team. You will monitor and triage security alerts, perform initial investigations, and escalate confirmed or suspicious activity in line with established playbooks.

You will collaborate closely with senior security team members. Responsibilities include monitoring SIEM, endpoint, and email security, performing triage, documenting cases, and supporting security

Qualifications

• Practical experience operating a SIEM in a Level 1 capacity.
• Hands-on exposure to enterprise security platforms such as Microsoft Defender, Elastic Security, Microsoft Sentinel, Splunk or CrowdStrike.
• Ability to search and interpret log data, and to draw conclusions from incomplete information.
• Understanding common attack techniques such as phishing, credential theft, malware delivery and social engineering.
• Email security fundamentals including message headers and sender authentication (SPF, DKIM, DMARC).
• Networking, Windows and Linux fundamentals sufficient to interpret host and network telemetry.
• Clear written English for case documentation and escalation.
• Methodical and consistent under repetitive workload, with sound judgement on when to upscale rather than proceed.

Responsibilities

• Monitor security alerts across SIEM, endpoint detection and email security platforms, and carry out initial triage and classification as benign, false positive, suspicious or confirmed incident.
• Perform initial investigation: gather evidence, correlate activity across endpoint, identity, email and network telemetry, and establish whether an alert represents genuine malicious activity.
• Investigate reported and quarantined email, analyze message headers, sender reputation, embedded links and attachments and action or elevate accordingly.
• Execute approved response playbooks for routine cases, and upscale indicators of compromise, lateral movement or data exposure to senior analysts with clear supporting evidence.
• Document each case: what was observed, the evidence gathered, the assessment reached and the action taken.
• Track open cases through to closure and ensure alerts are handled.
• Support security hygiene activity, including monitoring of security tooling coverage and follow-up on devices falling outside policy.
• Contribute to triage procedures, runbooks and operational reporting, and support awareness activities such as phishing simulation campaigns.

Skills

SIEM ops

Alert triage

Log analysis

Phishing basics

Email headers

Windows basics

Linux basics

English writing

Escalation decisions

Education

SC-200

CompTIA Security+

CompTIA Network+

Tools

Microsoft Defender

Elastic Security

Microsoft Sentinel

Splunk

CrowdStrike

Job description

Expereo International is seeking a motivated Level 1 SOC Analyst with 1–2 years of security operations experience to join our Security team. You will monitor and triage security alerts, perform initial investigations, and escalate confirmed or suspicious activity in line with established playbooks.

You will collaborate closely with senior security team members. Responsibilities include monitoring SIEM, endpoint, and email security, performing triage, documenting cases, and supporting security