Security Analyst

Zohorecruit; Cebu City; On-site; PHP 480,000 - 780,000; Full time

Job summary

Level Up Talent Solutions is seeking an experienced Security Analyst / SOC Analyst to support Security Operations Center activities, including real-time monitoring, incident detection, investigation, and remediation across Windows/Linux servers and databases.

The role requires hands-on experience with SIEM, EDR, firewalls, IDS/IPS, Active Directory, and ITSM platforms. Collaboration with network, infra, and application teams is essential for timely incident closure.

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity, Engineering, or related field
• 3–5 years in Cybersecurity, Security Operations, or SOC
• Hands-on with SIEM, EDR, firewalls, IDS/IPS
• Experience in security incident investigation and incident management
• Experience using Freshservice or similar ITSM platform
• Experience with vulnerability assessments and remediation

Responsibilities

• Monitor security alerts and events from SIEM/EDR/firewalls/IDS-IPS, proxies, antivirus, databases, apps, and servers
• Investigate events to classify as false positives or incidents
• Correlate events using IBM QRadar or Splunk and analyze logs for threats
• Lead incident response, root-cause analysis, and remediation tracking
• Monitor network traffic and sign-in activity for anomalies
• Review Active Directory authentication activity and access privileges
• Escalate incidents and track through resolution
• Create and monitor incident/vulnerability/remediation reports
• Onboard and configure logs into security monitoring platforms
• Coordinate vulnerability scans and remediation tracking
• Collaborate with infra, network, server, and app teams
• Participate in lessons-learned sessions to improve SOC processes

Skills

SIEM

EDR

Firewalls

IDS/IPS

Active Directory

Education

Bachelor's degree

Tools

Freshservice

ServiceNow

IBM QRadar

Splunk

CrowdStrike

FortiGate

Job description

Cebu City, Philippines | Posted on 09/23/2026

At Level Up Talent Solutions, we believe great work starts with feeling supported, trusted, and valued.

We are a people-focused talent company that connects skilled professionals with meaningful long-term opportunities. Our goal is to create an environment where you can do your best work, continue growing, and feel confident in the role you play within a team.

When you join Level Up Talent Solutions , you are not just filling a position. You are becoming part of a community that values clear communication, consistency, and mutual respect. We work closely with you to understand your strengths, your experience, and the type of work environment where you can thrive.

We support our talents through structured onboarding, ongoing guidance, and realistic expectations. You will always know what success looks like and who to turn to when you need support. We believe that when talents feel aligned and empowered, everyone succeeds.

At Level Up Talent Solutions, growth is not only about skills. It is about confidence, stability, and building a career you can be proud of.

We are here to help you level up.

Job Description

Job Overview Level Up Talent Solutions is looking for an experienced Security Analyst / SOC Analyst to support Security Operations Center activities, including real-time security monitoring, incident detection, investigation, response, vulnerability assessment, and security event analysis.

The role will work closely with Network, Infrastructure, Server, and Application teams to identify, investigate, contain, and remediate security threats while ensuring incidents are handled within defined SLAs. The ideal candidate has hands‑on experience with SIEM, EDR, firewalls, IDS/IPS, Windows/Linux environments, Active Directory, and ITSM/ticketing platforms.

Key Responsibilities

• Monitor and analyze security alerts and events from SIEM, EDR, firewalls, IDS/IPS, proxies, antivirus solutions, databases, applications, and Windows/Linux servers.
• Investigate security events and determine whether alerts are false positives or confirmed security incidents.
• Use IBM QRadar and/or Splunk to correlate events, analyze logs, detect suspicious activity, and investigate potential security breaches.
• Perform root cause analysis and manage security incidents in accordance with established incident response procedures.
• Monitor network traffic, system logs, sign-in activity, and access privileges for anomalous or potentially malicious behavior.
• Investigate user access and authentication activity through Active Directory and related security controls.
• Escalate confirmed incidents to the appropriate technical teams and track remediation through closure.
• Create, manage, and monitor incident tickets using Freshservice, ServiceNow, or similar ticketing platforms, ensuring SLA compliance.
• Configure and onboard logs from firewalls, IDS/IPS, Windows/Linux servers, databases, and applications into security monitoring platforms.
• Conduct vulnerability assessments across operating systems, servers, applications, ports, hardware, and network infrastructure.
• Coordinate scheduled vulnerability scans and track remediation of identified risks.
• Prepare security incident, vulnerability, remediation, compliance, and operational reports.
• Collaborate with infrastructure, network, server, and application teams to resolve security issues.
• Participate in incident reviews, knowledge-sharing sessions, and lessons-learned discussions to continuously improve SOC processes.

Requirements

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related field
• 3 to 5 years of relevant experience in Cybersecurity, Information Security, SOC Operations, or Security Operations
• Hands‑on experience with SIEM , EDR , firewalls , and IDS/IPS
• Strong experience in security incident investigation, root cause analysis, and incident management
• Ability to monitor and analyze network traffic, security logs, and security events
• Experience using Freshservice or a similar ITSM/ticketing platform
• Experience conducting vulnerability assessments and tracking remediation
• Ability to prepare security operational reports, incident reports, and vulnerability reports
• Hands‑on experience with IBM QRadar; exposure to Splunk is preferred
• Experience with endpoint security tools, preferably CrowdStrike
• Working knowledge of FortiGate or similar next‑generation firewalls
• Good understanding of Windows and Linux server security
• Experience with Active Directory, user access privileges, and authentication/sign-in logs
• Knowledge of SLA-driven incident management and escalation procedures
• Strong analytical, troubleshooting, documentation, and communication skills