Security Operations Analyst – SIEM, IR & Automation

MicroSourcing; Parañaque; On-site; PHP 600,000 - 1,000,000; Full time

Benefits offered by this job

Healthcare coverage from day one

Paid time‑off with cash conversion

Group life insurance

Performance bonuses

Job summary

MicroSourcing in Parañaque City, Metro Manila, Philippines is seeking an Information Security Analyst to monitor and protect client ecosystems, managing Endpoint Protection, Email Gateways, SIEM, and Web proxies on-site.

You will lead incident response, automate security workflows with scripting, and generate actionable reports for senior management, collaborating with vendors and internal stakeholders.

Qualifications

• At least 3+ years in a Security Operations (SecOps) role within a medium‑to‑large organization.
• Hands‑on experience with SIEM, DLP, Vulnerability Management, and PIM/PAM.
• Ability to handle end‑to‑end incident response and investigate system compromises.
• Excellent written and verbal communication for reporting to management and staff.
• Proven history of working in a position of trust with minimal supervision.

Responsibilities

• Monitor and manage technical security controls including Endpoint Protection, SIEM, DLP, and gateways.
• Investigate network and endpoint compromises via end‑to‑end incident response and forensics.
• Automate manual workflows and intelligence gathering through scripting to enhance threat hunting.
• Troubleshoot complex issues by collaborating with vendor support and internal teams.
• Generate operational reports by analyzing security data to track system health and risk.

Skills

SecOps experience

Incident response

Excellent communication

Trust-based role

Threat hunting

Attention to detail

Tools

SIEM

Email Security Gateways

Web proxies

DLP

PIM/PAM

Python

PowerShell

Bash

Job description

MicroSourcing in Parañaque City, Metro Manila, Philippines is seeking an Information Security Analyst to monitor and protect client ecosystems, managing Endpoint Protection, Email Gateways, SIEM, and Web proxies on-site.

You will lead incident response, automate security workflows with scripting, and generate actionable reports for senior management, collaborating with vendors and internal stakeholders.