Remote Global SOC Analyst - 24/7 Incident Response

The Bitcoin Street Journal; Manila; À distance; PHP 600 000 - 900 000; Plein temps

Résumé du poste

Tether is seeking a hands-on SOC Analyst to monitor, triage, and investigate security events across our global environment in a follow-the-sun model. This role is fully remote and collaborates with teams across time zones to ensure rapid containment and recovery.

You will work with SIEM, EDR, SSE, and WAF to tune detections, respond to incidents, and develop playbooks. The ideal candidate has 3+ years in SOC, strong threat hunting skills, and understands MITRE ATT&CK; certifications are a plus.

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related field.
• At least 3 years of hands‑on experience as a SOC Analyst, triaging alerts and investigating security incidents in a production environment.
• Solid working knowledge of core security technologies such as EDR, SSE, SIEM, and WAF, and of how to use them to investigate and respond to threats.
• Hands‑on experience implementing, configuring, and tuning these platforms, or writing and tuning detection content, is a big plus.
• Experience with incident response and threat hunting, ideally with familiarity with the MITRE ATT&CK framework.
• Excellent understanding of network security, endpoint security, cloud security, and Zero Trust principles.
• Relevant certifications such as Security+, CySA+, GCIA, GCIH, or vendor‑specific credentials are a plus.
• Strong analytical, troubleshooting, and problem‑solving skills with a high attention to detail.
• Ability to handle sensitive information responsibly and securely.
• Good written and verbal communication skills in English, and the ability to work effectively across technical and non‑technical teams and across time zones.

Responsabilités

• Monitor, triage, and analyze security alerts and events from the organization’s security stack, including SIEM, Endpoint Detection and Response (EDR), Security Service Edge (SSE), and Web Application Firewall (WAF) platforms.
• Investigate security incidents end to end, from initial triage through analysis, containment, eradication, and post‑incident documentation, coordinating with relevant teams throughout.
• Determine the scope, severity, and impact of security events, separating true positives from false positives and escalating confirmed incidents according to defined procedures.
• Execute response actions within the security platforms, such as isolating endpoints, blocking indicators, disabling compromised accounts, and enforcing access restrictions.
• Ensure structured, high‑quality shift handovers across regions in the follow‑the‑sun model, so that open investigations, ongoing incidents, and pending actions continue seamlessly around the clock.
• Proactively threat hunt across endpoint, network, and log data to uncover suspicious activity that existing detections may have missed, mapping findings to frameworks such as MITRE ATT&CK.
• Provide feedback on detection quality and contribute to the tuning of SIEM correlation rules, EDR custom detections, and WAF rules to reduce noise and improve coverage.
• Enrich investigations with threat intelligence, including indicators of compromise, attacker techniques, and emerging campaigns relevant to the organization.
• Develop and maintain technical documentation, standard operating procedures, and incident response playbooks.
• Collaborate with IT, infrastructure, application, and security engineering teams to resolve incidents and support day‑to‑day operations.
• Support vulnerability management and drive continuous improvement of the organization’s overall security posture.

Connaissances

Security analysis

Investigation mindset

English communication

Remote collaboration

Formation

Bachelor's degree in IT/Cybersecurity/CS

Outils

SIEM

EDR

SSE

WAF

Description du poste

Tether is seeking a hands-on SOC Analyst to monitor, triage, and investigate security events across our global environment in a follow-the-sun model. This role is fully remote and collaborates with teams across time zones to ensure rapid containment and recovery.

You will work with SIEM, EDR, SSE, and WAF to tune detections, respond to incidents, and develop playbooks. The ideal candidate has 3+ years in SOC, strong threat hunting skills, and understands MITRE ATT&CK; certifications are a plus.