Security Analyst / Network Security Analyst

RippedBoxStation; Philippines; On-site; PHP 260,000 - 420,000; Full time

Benefits offered by this job

Job summary

RippedBoxStation in the Philippines is seeking a junior Security Operations Center analyst to monitor SIEM dashboards, triage alerts, and collaborate with infrastructure, network, cloud, and application teams to resolve threats.

You will analyze logs, support routine security health checks, maintain incident records, and assist with reports, dashboards, and compliance documentation while growing your cybersecurity skills in a dynamic, shift-based environment.

Qualifications

• Bachelor's degree in cybersecurity, IT, CS, or related field.
• 0–2 years in cybersecurity or security operations.
• Knowledge of TCP/IP, DNS, VPN, firewalls, routers, switches.
• Familiarity with Windows and Linux.
• Analytical and written communication skills.
• Willingness to work in a shift-based SOC environment.

Responsibilities

• Monitor SIEM dashboards and security tooling for threats.
• Perform initial alert triage and escalate incidents.
• Analyze network security events and logs from security devices.
• Assist vulnerability scanning and remediation validation.
• Document findings and maintain incident records.
• Prepare security reports, dashboards, and compliance documentation.
• Collaborate with other teams to investigate issues.
• Participate in routine security health checks and access reviews.
• Maintain SOPs and knowledge base articles.

Skills

SIEM monitoring

Alert triage

Incident response

Log analysis

Threat hunting

TCP/IP networking

Windows/Linux

Documentation

Communication

Team collaboration

Education

Bachelor's degree in Cybersecurity, IT, CS or related

Tools

Splunk

QRadar

Microsoft Defender

Microsoft Sentinel

Elastic Stack

Job description

• Monitor Security Information and Event Management (SIEM) dashboards and security monitoring tools for potential threats and suspicious activities.
• Perform initial alert triage and elevate security incidents to senior analysts in accordance with established incident response procedures.
• Analyze network security events, logs, and alerts from firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection, and other security technologies.
• Assist in vulnerability scanning activities and support remediation validation for identified security weaknesses.
• Support incident response activities by documenting findings, collecting evidence, and maintaining incident records.
• Assist in preparing security reports, dashboards, compliance documentation, and operational metrics.
• Support security advisory activities by responding to user security inquiries and promoting cybersecurity awareness.
• Collaborate with infrastructure, network, cloud, and application teams to investigate and resolve security issues.
• Participate in routine security health checks, access reviews, and compliance monitoring activities.
• Maintain security documentation, standard operating procedures (SOPs), and knowledge base articles.
• Follow organizational security policies, incident handling procedures, and regulatory compliance requirements.
• Escalate security incidents, risks, and operational issues to senior security analysts or SOC leads when necessary.
  

Key Responsibilities

• Monitor Security Information and Event Management (SIEM) dashboards and security monitoring tools for potential threats and suspicious activities.
• Perform initial alert triage and elevate security incidents to senior analysts in accordance with established incident response procedures.
• Analyze network security events, logs, and alerts from firewalls, intrusion detection/prevention systems (IDS/IPS), endpoint protection, and other security technologies.
• Assist in vulnerability scanning activities and support remediation validation for identified security weaknesses.
• Support incident response activities by documenting findings, collecting evidence, and maintaining incident records.
• Assist in preparing security reports, dashboards, compliance documentation, and operational metrics.
• Support security advisory activities by responding to user security inquiries and promoting cybersecurity awareness.
• Collaborate with infrastructure, network, cloud, and application teams to investigate and resolve security issues.
• Participate in routine security health checks, access reviews, and compliance monitoring activities.
• Maintain security documentation, standard operating procedures (SOPs), and knowledge base articles.
• Follow organizational security policies, incident handling procedures, and regulatory compliance requirements.
• Escalate security incidents, risks, and operational issues to senior security analysts or SOC leads when necessary.
  

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Computer Engineering, or a related field.
• 0–2 years of experience in Cybersecurity, Security Operations, Network Administration, IT Support, or a related technical role.
• Basic understanding of cybersecurity principles, networking concepts, and information security best practices.
• Familiarity with TCP/IP, DNS, VPN, firewalls, routers, and switches.
• Basic knowledge of SIEM platforms and security monitoring concepts.
• Understanding of common cyber threats, vulnerabilities, malware, phishing, and attack vectors.
• Familiarity with Windows and Linux operating systems.
• Strong analytical, problem-solving, and communication skills.
• Ability to work under close guidance and daily supervision.
• Willingness to work in a shift-based Security Operations Center (SOC) environment, if required.
  

Preferred Certifications

• CompTIA Security+
• AWS Certified Cloud Practitioner
• Microsoft Azure Fundamentals (AZ-900)
• Cisco Certified Support Technician (CCST) Cybersecurity or Cisco Certified Network Associate (CCNA)
• Scrum Foundations
• ITIL Foundation (Preferred)
  

Technical Skills

• Security Operations Center (SOC) Fundamentals
• SIEM Monitoring & Alert Triage
• Network Security Fundamentals
• TCP/IP, DNS, VPN & Firewall Concepts
• Vulnerability Scanning Fundamentals
• Incident Response Fundamentals
• Windows & Linux Administration
• Endpoint Security Fundamentals
• Security Documentation & Reporting
• Microsoft Defender, Microsoft Sentinel, Splunk, QRadar, or similar SIEM platforms (Basic Knowledge)
• Agile & IT Service Management (ITSM)
• Security Awareness & Compliance