Security Operations Analyst - 24x7 MDR Expert

Rippling, Inc.; Philippines; Remote; PHP 700,000 - 1,000,000; Full time

Benefits offered by this job

Career development

Training reimbursement

Competitive compensation

Career growth

Remote-first culture

Job summary

Workstreet is seeking a Security Operations Analyst to join our Security Services team. This is a hands-on monitoring and investigation role: you'll triage and validate alerts, lead deep investigations across EDR, firewall, IPS, WAF, and SIEM tooling, and deliver clear, actionable findings and remediation guidance across our clients' environments, with clients owning execution of the actual response.

You’ll work as part of a 24x7 rotating shift schedule, partnering directly with client

Qualifications

• 3+ years in SOC monitoring and incident response.
• Experience correlating telemetry across EDR, network, and cloud logs.
• Ability to own complex investigations end to end.
• Strong documentation and communication skills.

Responsibilities

• Execute real-time monitoring and triage of alerts across EDR, firewall, IPS, WAF, and SIEM.
• Maintain 24x7 shift coverage, including nights and weekends.
• Conduct deep incident investigations across telemetry sources.
• Deliver remediation guidance to client teams.
• Tune detection logic and SIEM rules to reduce false positives.
• Maintain SOC playbooks and incident timelines.
• Drive cross-functional security alignment with GRC engineers and vCISOs.
• Assist with shift handoffs and mentor junior analysts.

Skills

SOC analyst

Telemetry correlation

Incident ownership

Technical communication

24x7 rotation

Team collaboration

Education

Security credentials (e.g., CompTIA Security+ / CySA+ / GCIH)

Tools

EDR tools

CrowdStrike

SentinelOne

Defender

Splunk

Microsoft Sentinel

Sumo Logic

Wazuh

SOAR

Job description

Workstreet is seeking a Security Operations Analyst to join our Security Services team. This is a hands-on monitoring and investigation role: you'll triage and validate alerts, lead deep investigations across EDR, firewall, IPS, WAF, and SIEM tooling, and deliver clear, actionable findings and remediation guidance across our clients' environments, with clients owning execution of the actual response.

You’ll work as part of a 24x7 rotating shift schedule, partnering directly with client