Security Operations Analyst — Remote, 24x7 SOC

workstreet; Philippines; Remote; PHP 450,000 - 750,000; Full time

Benefits offered by this job

Remote-first culture

Career development

Training reimbursement

Competitive compensation

Growth opportunities

Bonuses

Job summary

Workstreet is seeking a Security Operations Analyst to join our Security Services team. This hands-on role involves triaging alerts, leading deep investigations across EDR, firewall, IPS, WAF, and SIEM tools, and delivering clear remediation guidance to clients.

You will work on a 24x7 rotating shift schedule, collaborating with client stakeholders to maintain strong detection coverage. The successful candidate ramping into our detection stack will take ownership of shift-level monitoring,

Qualifications

• 3+ years in a high-velocity SOC environment.
• Experience correlating data across EDR, firewall, IPS, WAF, and SIEM.
• Ability to own investigations end-to-end with minimal oversight.
• Excellent written and verbal English communication.

Responsibilities

• Execute real-time monitoring and triage across EDR, firewall, IPS, WAF, and SIEM.
• Maintain 24x7 shift coverage including nights, weekends, and holidays.
• Conduct deep incident investigations across telemetry sources to determine root cause, scope, and IOCs.
• Deliver remediation guidance to client teams who own response execution.
• Tune detection logic and SIEM rules to reduce false positives and gaps.
• Maintain SOC playbooks and incident timelines in case management systems.

Skills

SOC experience

Telemetry correlation

Communication

Shift readiness

Team collaboration

Tools

CrowdStrike

SentinelOne

Microsoft Sentinel

Splunk

EDR tooling

Job description

Workstreet is seeking a Security Operations Analyst to join our Security Services team. This hands-on role involves triaging alerts, leading deep investigations across EDR, firewall, IPS, WAF, and SIEM tools, and delivering clear remediation guidance to clients.

You will work on a 24x7 rotating shift schedule, collaborating with client stakeholders to maintain strong detection coverage. The successful candidate ramping into our detection stack will take ownership of shift-level monitoring,