Mid-Level SOC Analyst

Lennor Group; Eastern Manila District; On-site; PHP 600,000 - 800,000; Full time

Job summary

A recruitment agency in the Philippines is seeking a Mid-Level SOC Analyst to join a global client in Ortigas. This role involves performing incident response, monitoring security alerts, analyzing suspicious activities, and contributing to threat intelligence efforts. Candidates must have a Bachelor's degree in a related field and 3-5 years of incident response experience. Opportunities for career growth are available in this onsite position.

Qualifications

• 3-5 years of experience in L2 incident response.
• Skills in containment, isolation, and root cause analysis.
• Proficiency in documentation and incident response.

Responsibilities

• Perform triage and assess severity of incidents.
• Continuously monitor security alerts and logs.
• Analyze suspicious emails and provide recommendations.
• Assist in developing and executing Recovery Plans.
• Monitor releases of new vulnerability advisories.

Skills

Incident response

Cyber threat intelligence

Documentation

Education

Bachelor's Degree in Computer Science or related field

Job description

Our brand, Lennor Metier Consulting, a DOLE-licensed headhunting and recruitment agency in the Philippines, is proud to partner with one of our global clients in their search for a Mid-Level SOC Analyst based in Ortigas.

Salary Range: Up to ₱75,000

Work Setup: Onsite

Shift Schedule: Day Shift

Location: Ortigas City

Your Responsibilities:

• 24/7 Incident Response
  • Perform triage, assess severity of incidents
  • Investigate and contain security incidents
  • Execute predefined response procedures
• 24/7 Alerts Monitoring
  • Continuously monitor security alerts, logs, and network traffic
  • Identify potential threats or anomalies
• Suspicious Email Analysis and other Security Validations
  • Respond to reported suspicious emails
  • Analyze suspicious emails, trigger email threat remediation actions
  • Perform validations for reported suspicious activities and other cybersecurity concerns
  • Provide recommendations on analyzed concerns
• Documentations and other tasks
  • Assist in developing and executive Recovery Plan
  • Participate in investigations or forensics activities
  • Participate in change management processes
  • Assist in troubleshooting hardware and software issues of Collectors and MXDR agents
  • Documentation of Incident Reports, weekly/monthly reporting, maintenance of trackers and other relevant documents
  • Detection Rules review and configuration
• Threat Intelligence duties
  • Performance relevant Threat Intelligence team responsibilities
  • Indicators of compromise (IOCs): Collect, analyze, disseminate, and initiate blacklisting
  • Compromised accounts: Monitor and validate Client's password leaks
  • Brand protection initiatives: hunting of trademark infringements and other violations, impersonations, and sales scams. Perform validations, request for takedown, and monitoring
• Others:
  • Threat Intel publications and release of advisories, and other reports
  • Monitor releases of new vulnerability advisories, disseminate and track
  • Monitor of other potential leaks relating to Client (e.g. code repository, database, etc.)
  • Implement and enforce security policies, procedures, and best practices.
  • Track and validate security controls, addressing deviations and risks

What We're Looking For:

• Must have a Bachelor's Degree in Computer Science, I.T, or in any other related course
• Must have 3-5 years of experience in L2 incident response such as containment, isolation, root cause analysis and deep probing analysis.
• Experience in cyber threat intelligence is an advantage
• Must be proficient in documentation, strong incident, attack response and containment skills.

Ready to take the next step in your career? Submit your application now!