Security Operations Analyst

Thomson Reuters; Manila; Hybrid; PHP 600,000 - 840,000; Full time

Benefits offered by this job

Hybrid Work Model

Flex My Way

Job summary

Thomson Reuters is seeking a Security Operations Analyst to protect our global technology environment. You will monitor, investigate, and respond to security events across enterprise systems, networks, cloud environments, and applications, working within the ISRM team.

You will document investigations, perform malware analysis, and collaborate to improve detection and incident-response workflows while maintaining SOPs and supporting 24/7 operations in a hybrid role.

Qualifications

• Bachelor's degree in a related field or equivalent experience.
• Hands-on SOC/IR experience with enterprise environments.
• Knowledge of SIEM, EDR, firewalls, and cloud security tools.
• Ability to analyze threats and perform end-to-end investigations.

Responsibilities

• Monitor security events across global networks and respond to incidents.
• Triage alerts from SIEM/EDR and conduct investigations across OS, networks, cloud, and endpoints.
• Perform malware analysis using open-source and vendor tools.
• Document investigations and prepare incident briefings and reports.
• Collaborate with ISRM to improve detection, alerting, and automation workflows.
• Create and maintain standard operating procedures for SOC operations.
• Work a hybrid schedule with on-site days and rotating shifts.

Skills

SOC experience

Incident response

SIEM tools

EDR tools

Malware analysis

Networking basics

Analytical thinking

Education

Bachelor's degree

Cybersecurity degree preferred

Tools

Forensic tools

Firewalls

Cloud security tools

SOAR platforms

Job description

Security Operations Analyst

Job Description

Thomson Reuters is seeking a Security Operations Analyst to help protect our global technology environment from evolving cybersecurity threats. As part of the Information Security and Risk Management (ISRM) team, you will monitor, investigate, and respond to security events across enterprise systems, networks, cloud environments, and applications.In this role, you will work alongside security professionals across the organization to identify potential threats, support incident response efforts, and strengthen detection capabilities. This is an opportunity to make a meaningful impact by helping safeguard the systems and data that power trusted information for professionals around the world.

Key Responsibilities

• Monitor enterprise security events and respond to potential incidents across a global network environment, serving as a secondary resource and assuming primary analyst responsibilities during team-member absences, escalations, or critical incidents.
• Detect, analyze, and triage alerts generated by security tools, including Intrusion Detection Systems (IDS) and Security Information and Event Management (SIEM) platforms.
• Conduct end-to-end security investigations across operating systems, networks, cloud environments, messaging platforms, applications, and endpoints.
• Perform malware analysis, including analysis of malicious code and obfuscated scripts, using open-source and vendor-provided tools.
• Document security monitoring, investigations, and incident-response activities using case-management and ticketing systems; prepare incident briefings, end-of-shift reports, and alerts related to intrusions or compromises.
• Partner with Information Security and Risk Management teams to improve detection, alerting, incident-response workflows, automation opportunities, and broader security operations capabilities.
• Create, maintain, and follow standard operating procedures and related documentation to support consistent operations, knowledge transfer, and continuous improvement across analyst shifts.
• Work schedule and arrangement: Hybrid role with onsite work two to three days weekly; requires rotating shifts, weekend work, and on-call availability in a 24/7 environment.

Required Qualifications

• Bachelor's degree.
• One to three years of experience working in a Security Operations Center (SOC), incident-response team, or comparable cybersecurity operations environment.
• Hands-on experience conducting security investigations across operating systems, networks, cloud platforms, messaging systems, applications, and endpoints.
• Working knowledge of core technology concepts, including networking, workstations, servers, and operating systems.
• Experience working with security technologies such as Security Information and Event Management (SIEM), endpoint detection and response (EDR), antivirus, forensic tools, firewalls, or cloud-security tools.
• Knowledge of cybersecurity attack techniques, defensive controls, and incident-response practices.
• Strong analytical and critical-thinking skills, with the ability to conduct end-to-end security investigations and apply sound judgment during security events.
• Ability to make timely decisions, solve problems, and work independently in a fast-paced security operations environment.
• Ability to adapt to evolving threats, technologies, priorities, and operational requirements.
• Demonstrated commitment to continually learning and developing cybersecurity knowledge and skills.

Preferred Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Experience with cloud cybersecurity tools and cloud-security investigations.
• Experience with Security Orchestration, Automation, and Response (SOAR) platforms, security automation tools, scripting, or process automation to improve security monitoring, investigation, or incident-response workflows.
• Experience performing malware analysis, including analysis of malicious code or obfuscated scripts.
• Experience using case-management or security ticketing platforms.
• Experience creating or maintaining security standard operating procedures and operational documentation.
• Relevant cybersecurity certifications or specialized cybersecurity training.

What's in it For You?

• Hybrid Work Model: We've adopted a flexible hybrid working environment (2-3 days a week in the office depending on the role) for our office-based roles while delivering a seamless experience that is digitally and physically connected.
• Flexibility & Work-Life Balance: Flex My Way is a set of supportive workplace policies designed to help manage personal and professional responsibilities, whether caring for family, giving back to the community, or finding time to refresh and reset. This builds upon our flexible work arrangements, including work from anywhere for up to 8 weeks per year, empowering employees to achieve a better work-life balance.
• Career Development and