Security Operations Analyst: Incident Response & Threat Monitoring

Moder Solutions Inc.; Cebu City; On-site; PHP 420,000 - 720,000; Full time

Job summary

Moder Solutions Inc. in Cebu City is seeking an experienced Security Analyst to support SOC activities, including real-time monitoring, incident detection and response, and vulnerability assessment.

The role collaborates with infrastructure, network, server, and application teams to address threats within defined SLAs. Hands-on experience with SIEM, CrowdStrike, FortiGate, Windows/Linux environments, Active Directory, and ServiceNow is required, along with strong analytical and communication

Qualifications

• 3–5 years of relevant experience in Cybersecurity, Information Security, or Security Operations.
• Strong understanding of SOC operations, security monitoring, incident investigation, incident response, and log analysis.
• Experience with Endpoint Detection & Response / Endpoint Security, preferably CrowdStrike.
• Experience monitoring and analyzing firewalls, IDS/IPS, proxies, antivirus, email security, servers, databases, and network security devices.
• Working knowledge of FortiGate or similar next‑generation firewalls.
• Good understanding of Windows and Linux server security.
• Experience with Active Directory, user access privileges, and authentication/sign‑in logs.
• Experience with ServiceNow or equivalent ITSM/ticketing platforms.
• Understanding of vulnerability assessment, remediation tracking, and vulnerability reporting.
• Ability to differentiate false‑positive and true‑positive security alerts through detailed investigation.

Responsibilities

• Monitor and analyze security alerts and events from SIEM, EDR, firewalls, IDS/IPS, proxies, antivirus, servers, databases, and applications.
• Perform end‑to‑end security incident investigation and determine true security incidents.
• Perform root cause analysis and manage incidents per Incident Response frameworks.
• Monitor network traffic and logs to identify anomalous or malicious activity.
• Investigate user activity and sign‑in logs using Active Directory and security controls.
• Escalate incidents to appropriate teams and track through closure.
• Create and track security incident tickets using ServiceNow, ensuring SLAs are met.
• Onboard security logs from various sources into monitoring platforms.
• Conduct vulnerability assessments across OS, ports, apps, and infrastructure.
• Coordinate vulnerability scans on weekly/monthly/quarterly schedules.
• Prepare vulnerability, remediation, security incident, compliance, and operational reports.
• Analyze daily/monthly incident management reports and support security compliance activities.
• Collaborate with Network/Infrastructure/Server/Application teams to remediate issues.
• Participate in knowledge-sharing sessions and lessons-learned discussions to improve SOC capabilities.

Skills

SOC operations

log analysis

incident investigation

incident response

vulnerability assessment

EndPoint security

Active Directory

ServiceNow

Windows/Linux security

Analytical skills

Education

Bachelor’s degree in engineering, Computer Science, IT, Cybersecurity, or related

Tools

CrowdStrike

FortiGate

Active Directory

ServiceNow

Windows Server

Linux Server

Job description

Moder Solutions Inc. in Cebu City is seeking an experienced Security Analyst to support SOC activities, including real-time monitoring, incident detection and response, and vulnerability assessment.

The role collaborates with infrastructure, network, server, and application teams to address threats within defined SLAs. Hands-on experience with SIEM, CrowdStrike, FortiGate, Windows/Linux environments, Active Directory, and ServiceNow is required, along with strong analytical and communication