Security Operations Analyst II

Vertiv Co; Philippines; On-site; PHP 900,000 - 1,200,000; Full time

Job summary

Vertiv Co. seeks an experienced SOC Analyst II in the Philippines to monitor and respond to cybersecurity incidents, escalating from Tier 1 and mentoring junior analysts.

The role focuses on in-depth incident analysis, containment actions, and playbook development across SIEM, EDR, and cloud environments. You will collaborate with Incident Response, Threat Intelligence, and Security Engineering teams to strengthen defenses, perform log analysis, and provide clear incident documentation and

Qualifications

• Degree in Computer Science, Computer Engineering, IT or equivalent.
• 3–5 years of cybersecurity/SOC experience.
• Security certifications such as CompTIA Security+, CEH, GSEC, or equivalent.
• Familiarity with SIEM, IDS/IPS, firewalls and endpoint protection.
• Knowledge of NIST, MITRE ATT&CK, ISO 27001.
• Understanding networking, OS, and security best practices.
• Strong communication and documentation skills.
• Experience with log analysis, malware behavior, and threat intel.
• Willingness for rotational shifts for 24/7 monitoring.

Responsibilities

• Monitor security events and alerts from SIEM/SOAR systems and related tools.
• Perform deep-dive analysis of Tier 1 alerts to determine scope and impact.
• Conduct log correlation across SIEM, EDR, network, cloud, and identity platforms.
• Investigate incidents, determine root cause, and coordinate containment actions.
• Develop and implement incident response playbooks and procedures.
• Collaborate with IT and security teams to enhance configurations and defenses.
• Document incidents, findings, and recommendations for mitigation.
• Stay updated on threats and MITRE ATT&CK techniques.
• Assist in threat hunting and proactive security monitoring.

Skills

Analytical skills

Problem solving

Communication

Documentation

Automation scripting

Threat hunting

MITRE ATT&CK knowledge

Incident response (NIST/SANS)

Cloud security awareness

Education

Bachelor's degree in CS/CE/IT

Tools

SIEM

EDR

SOAR

Firewalls

Threat intelligence platforms

Job description

Job Description

Job (Assignment) Title: SOC Analyst II

Function/Department: Security / Information Technology

Reports To: Manager Security Operations and Engineering

Position Summary

• The SOC Analyst II is responsible for overseeing cybersecurity by monitoring, detecting, investigating, and responding to security incidents within an organization. And act as an escalation from Tier 1 analyst. This role focuses on incident analysis, threat validation, containment actions, and root cause identification, while supporting continuous improvement of SOC detections, playbooks, and threat intelligence integration.

The Level II analyst acts as a technical escalation point, mentoring junior analysts and collaborating closely with Incident Response, Threat Intelligence, and Security Engineering teams

Responsibilities

• Monitor security events and alerts from SIEM (Security Information and Event Management) systems/ SOAR, 7AI Dashboard and other security tools.
• Perform deep-dive analysis of security alerts escalated by Tier 1 to determine legitimacy, scope, and impact
• Conduct log correlation and forensic analysis across SIEM, EDR, network, cloud, and identity platforms
• Analyze and investigate security incidents to determine their impact and root cause.
• Respond to security incidents, coordinate with stakeholders, and upscale as necessary.
• Conduct risk analysis to identify security gaps.
• Develop and implement incident response procedures and playbooks.
• Collaborate with IT and security teams to improve security configurations and defenses.
• Document security incidents, findings, and recommendations for future mitigation.
• Stay updated on the latest cybersecurity threats, trends, and best practices.
• Identify Indicators of Compromise (IOCs) and attack patterns using threat intelligence and MITRE ATT&CK
• Execute containment and remediation actions (e.g., isolate hosts, block indicators, disable accounts)
• Work with our Security Engineering group for any security application and tools within SOC for enhancement or fine tuning.
• Assist in threat hunting and proactive security monitoring.
• Participate in security awareness training and initiatives.

Qualifications

• Candidate must be a degree holder in Computer Science, Computer Engineering, information Technology or equivalent qualifications
• 3-5 years of experience in cybersecurity, SOC operations, or a similar role.
• Security certifications such as CompTIA Security+, CEH, GSEC, or equivalent.
• Familiarity with SIEM tools, IDS/IPS, firewalls, and endpoint protection solutions.
• Knowledge of cybersecurity frameworks such as NIST, MITRE ATT&CK, or ISO 27001.
• Understanding of networking protocols, operating systems, and security best practices.
• Strong analytical and problem-solving skills.
• Strong understanding of incident response lifecycle (NIST / SANS)
• Hands-on experience with log analysis, endpoint telemetry, and network traffic analysis
• Ability to analyze malware behavior, lateral movement, persistence, and privilege escalation
• Excellent communication and documentation abilities.
• Experience with scripting languages (Python, PowerShell, etc.) for automation.
• Knowledge of cloud security (AWS, Azure, Google Cloud).
• Familiarity with forensic analysis and malware investigation techniques.
• Rotational shifts may be required to support 24/7 security monitoring.
• Ability to work in a fast-paced and high-pressure environment.