Security Operations Center Analyst

TaskUs; Las Piñas; On-site; PHP 446,000 - 781,000; Full time

Benefits offered by this job

Competitive salary

Comprehensive benefits

Internal mobility opportunities

Job summary

TaskUs is looking for a Security Operations Center Analyst to join our Las Piñas campus in the Philippines. You will triage security alerts, investigate events across endpoints, networks, and cloud, and help strengthen detection for our global client base.

You will participate in a rotating 24x7 schedule, collaborate with cross-functional teams, and contribute to post-event reports, threat intel, and process improvements.

Qualifications

• 1+ year in SOC, IR, or cybersecurity analyst role.
• Experience investigating security events across endpoints, networks, and cloud platforms.
• Knowledge of NIST, MITRE ATT&CK, CIS Controls, and Cyber Kill Chain.
• Hands-on experience with SIEM platforms (Microsoft Sentinel, Splunk, QRadar, LogRhythm).
• Experience with EDR solutions (Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, Carbon Black).
• Knowledge of networking protocols, operating systems, authentication, and cloud security concepts.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication (customer calls).

Responsibilities

• Investigate security alerts and suspicious activities from client security stack, 3rd party tools, and cloud platforms.
• Perform detailed investigations into security alerts, attacker techniques, and identify emerging threats.
• Correlate events from multiple security tools and data sources to determine risk and remediation actions.
• Assist with developing and maintaining detection rules, use cases, playbooks, and response procedures.
• Validate security events and reduce false positives through tuning and optimization of monitoring tools.
• Assist with preparing post-event reports, executive summaries, and technical documentation.
• Stay current on threat intelligence, attacker TTPs, and emerging cybersecurity trends.

Skills

Analytical skills

Troubleshooting

Problem-solving

Communication skills

Education

Bachelor's degree in Cybersecurity or related field

Tools

Microsoft Sentinel

Splunk

QRadar

LogRhythm

Defender for Endpoint

CrowdStrike

SentinelOne

Carbon Black

PowerShell

Python

KQL

Job description

About TaskUs: TaskUs is a provider of outsourced digital services and next-generation customer experience to fast-growing technology companies, helping its clients represent, protect and grow their brands. Leveraging a cloud-based infrastructure, TaskUs serves clients in the fastest-growing sectors, including social media, e-commerce, gaming, streaming media, food delivery, ride-sharing, HiTech, FinTech, and HealthTech.

The People First culture at TaskUs has enabled the company to expand its workforce to approximately 60,000 employees globally. Presently, we have a presence in twenty-three locations across twelve countries, which include the Philippines, India, and the United States.

It started with one ridiculously good idea to create a different breed of Business Processing Outsourcing (BPO)! We at TaskUs understand that achieving growth for our partners requires a culture of constant motion, exploring new technologies, being ready to handle any challenge at a moment’s notice, and mastering consistency in an ever-changing world.

What We Offer: At TaskUs, we prioritize our employees’ well-being by offering competitive industry salaries and comprehensive benefits packages. Our commitment to a People First culture is reflected in the various departments we have established, including Total Rewards, Wellness, HR, and Diversity. We take pride in our inclusive environment and positive impact on the community. Moreover, we actively encourage internal mobility and professional growth at all stages of an employee’s career within TaskUs. Join our team today and experience firsthand our dedication to supporting People First.

Job Description

What can you expect in a Security Operations Center Analyst role with TaskUs:

Our client’s Security Operations Center (SOC) currently monitors approximately 65,000 global organizations, 2 million endpoints, and 3 million mailboxes/users from 3 SOC locations. The SOC Analyst 1 serves as an initial triage and alert review point for security events and alerts from our security tools. This role is responsible for conducting in-depth investigations, performing threat analysis, containing attacks, and assisting with improving detection capabilities.

Key Responsibilities:

• Investigate security alerts and suspicious activities from our client’s own security stack, 3rd party tools, and cloud platforms.
• Perform detailed investigations into security alerts, attacker techniques, and identify emerging threats.
• Correlate events from multiple security tools and data sources to determine risk, business impact, and required remediation actions.
• Assist with developing and maintaining detection rules, use cases, playbooks, and response procedures.
• Validate security events and reduce false positives through tuning and optimization of monitoring tools.
• Assist with preparing post-event reports, executive summaries, and technical documentation.
• Stay current on threat intelligence, attacker tactics, techniques, and procedures (TTPs), and emerging cybersecurity trends.

Required Qualifications:

• At least 1 year of experience in a Security Operations Center, Incident Response, or Cybersecurity Analyst role.
• Experience investigating security events across endpoint, network, and cloud platforms.
• Strong understanding of cybersecurity frameworks such as NIST, MITRE ATT&CK, CIS Controls, and Cyber Kill Chain.
• Hands-on experience with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or LogRhythm.
• Experience with endpoint detection and response (EDR) solutions such as Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, or Carbon Black.
• Knowledge of networking protocols, operating systems, authentication technologies, and cloud security concepts.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication skills (you will be on customer calls).

Preferred Qualifications:

• Security certifications such as Security+, CySA+, GCIH, GCIA, GCFA, SC-200, CISSP, or equivalent.
• Experience with Microsoft security technologies including Defender XDR, Sentinel, Entra ID, and Microsoft 365 security solutions.
• Experience with scripting or automation using PowerShell, Python, KQL, or similar languages.
• Knowledge of digital forensics and incident response methodologies. Experience supporting cloud environments such as Azure, AWS, or Google Cloud Platform.

Success Measures:

• Timely identification and resolution of security incidents.
• Reduction of false-positive alerts through continuous tuning.
• Improvement of detection coverage and threat visibility.
• Contributions to security process improvements, team education, and operational maturity.

Education / Certifications:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field; equivalent experience may be considered.

Work Location / Work Schedule / Travel:

• Las Pinas office (Hiraya)
• 100% On-site Work setup
• 24x7 rotating-shift (rotate shifts every 4 to 6 weeks)

DEI: In TaskUs we believe that innovation and higher performance are brought by people from all walks of life. We welcome applicants of different backgrounds, demographics, and circumstances. Inclusive and equitable practices are our responsibility as a business. TaskUs is committed to providing equal access to opportunities. If you need reasonable accommodations in any part of the hiring process, please let us know.