Security Operations Center Analyst

LanceSoft, Inc.; Metro Manila; Presencial; PHP 500 000 - 900 000; Tempo integral

Resumo da oferta

LanceSoft, Inc. is seeking an experienced Security Analyst / SOC Analyst to join our cybersecurity team in the Philippines. You will support security monitoring, incident detection, investigation, response, and vulnerability management, with a focus on SIEM, EDR, and firewall technologies.

The role requires 3–5 years in SOC or cybersecurity, hands-on Splunk/QRadar, and expertise in Windows and Linux security. Onsite work with a flexible shift and 24x7 SOC support as needed.

Qualificações

• 3-5 years of experience in SOC / Cybersecurity / Information Security.
• Hands-on experience with Splunk and/or IBM QRadar.
• Experience with EDR/Endpoint Security – preferably CrowdStrike.
• Knowledge of FortiGate or similar next-generation firewalls.
• Experience with Windows & Linux security.
• Working knowledge of Active Directory, authentication, and access controls.
• Experience with ServiceNow or similar ITSM/ticketing tools.
• Understanding of vulnerability assessment and remediation.

Responsabilidades

• Monitor and investigate security alerts from SIEMs, EDRs, firewalls, IDS/IPS, servers, apps, and network devices.
• Perform security incident investigation, validation, root cause analysis, and escalation.
• Analyze logs and security events using SIEM platforms such as Splunk and/or IBM QRadar.
• Monitor endpoint security solutions such as CrowdStrike or similar EDR tools.
• Investigate suspicious user activity, authentication events, and access privileges.
• Collaborate with network, infrastructure, server, and application teams to contain and remediate security incidents.
• Manage security incidents and tickets within defined SLA requirements.
• Support vulnerability assessments, remediation tracking, and vulnerability reporting.
• Prepare security incident, vulnerability, compliance, and operational reports.
• Participate in incident reviews, knowledge sharing, and continuous improvement of SOC processes.

Conhecimentos

SOC operations

Incident response

Log analysis

Endpoint security

Active Directory

Communication skills

ITSM

Formação académica

Bachelor's degree in Computer Science / IT / Cybersecurity / Engineering

Ferramentas

Splunk

QRadar

CrowdStrike

FortiGate

Windows security

Linux security

Descrição da oferta de emprego

WE'RE HIRING: Security Analyst / SOC Analyst

• Location: Philippines
• Employment Type: Full-Time
• Experience: 3-5 Years
• Shift: Flexible / 24x7 SOC Support as required
• Work Setup: Onsite

Role Overview

We are looking for an experienced Security Analyst / SOC Analyst to join our cybersecurity team and support security monitoring, incident detection, investigation, response, and vulnerability management.

Key Responsibilities

• Monitor and investigate security alerts from SIEM, EDR, firewalls, IDS/IPS, servers, applications, and network devices.
• Perform security incident investigation, validation, root cause analysis, and escalation.
• Analyze logs and security events using SIEM platforms such as Splunk and/or IBM QRadar.
• Monitor endpoint security solutions such as CrowdStrike or similar EDR tools.
• Investigate suspicious user activity, authentication events, and access privileges.
• Work with Network, Infrastructure, Server, and Application teams to contain and remediate security incidents.
• Manage security incidents and tickets within defined SLA requirements.
• Support vulnerability assessments, remediation tracking, and vulnerability reporting.
• Prepare security incident, vulnerability, compliance, and operational reports.
• Participate in incident reviews, knowledge sharing, and continuous improvement of SOC processes.

Required Skills

• 3-5 years of experience in SOC / Cybersecurity / Information Security
• Strong knowledge of SOC operations, incident response, investigation, and log analysis
• Hands-on experience with Splunk and/or IBM QRadar
• Experience with EDR/Endpoint Security – preferably CrowdStrike
• Knowledge of FortiGate or similar next-generation firewalls
• Experience with Windows & Linux security
• Working knowledge of Active Directory, authentication, and access controls
• Experience with ServiceNow or similar ITSM/ticketing tools
• Understanding of vulnerability assessment and remediation
• Strong analytical, troubleshooting, documentation, and communication skills

Education: Bachelor's degree in Computer Science, IT, Cybersecurity, Engineering, or a related field preferred.