Security Operations Analyst - Incident Response

Globe Telecom, Inc.; Metro Manila; On-site; PHP 600,000 - 900,000; Full time

Job summary

Globe Telecom, Inc. is seeking a Security Operations Specialist in Metro Manila to monitor security alerts, perform incident response, and support containment and remediation efforts.

You will document investigations, escalate when required, and help refine detection rules and playbooks to reduce false positives. Ideal candidates have 2+ years in security operations, a solid understanding of SIEM/EDR, cloud security, and strong technical writing skills.

Qualifications

• Experience in security monitoring, incident response, or security operations center work.
• Working knowledge of SIEM, EDR, email security, cloud security, and related security monitoring tools.
• Ability to analyze logs, investigate suspicious activity, and form evidence-based conclusions.
• Familiarity with MITRE ATT&CK, attacker behavior mapping, or comparable investigative frameworks.
• Strong technical documentation and case-writing skills.

Responsibilities

• Monitor and respond to security alerts from SIEM and security tools; acknowledge and triage per playbooks.
• Perform advanced incident response activities including discovery, threat analysis, and containment.
• Document investigations clearly with escalation notes and artifacts for review and handoff.
• Containment and response support through validation and coordination with owners and teams.
• Identify recurring false positives and contribute to detection tuning and SOC improvements.

Skills

Security monitoring

Incident response

SIEM

EDR

Cloud security

MITRE ATT&CK

Technical writing

Education

Bachelor's degree

Tools

SIEM platforms

IDS

DLP

Vulnerability scanning

Firewalls

Endpoint security

Email security

Job description

Globe Telecom, Inc. is seeking a Security Operations Specialist in Metro Manila to monitor security alerts, perform incident response, and support containment and remediation efforts.

You will document investigations, escalate when required, and help refine detection rules and playbooks to reduce false positives. Ideal candidates have 2+ years in security operations, a solid understanding of SIEM/EDR, cloud security, and strong technical writing skills.