SECURITY OPERATIONS CENTER ANALYST

Bounty Fresh Group Holdings Inc; Taguig; On-site; PHP 502,000 - 670,000; Full time

Job summary

Bounty Fresh Group Holdings Inc. is seeking a Security Operations Center Analyst to monitor, detect, investigate, and respond to cybersecurity threats across the organization's IT infrastructure.

You will work within the Corporate IT department, primarily in an office-based setting. The role requires 2+ years in SOC or related fields, experience with SIEM platforms (FortiSIEM, Splunk), and strong knowledge of Windows, Linux, AD, networking, and incident handling.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field.
• Relevant cybersecurity certifications are an advantage.
• Minimum 2 years experience in SOC, Cybersecurity Operations, or Information Security.
• Experience with SIEM platforms such as FortiSIEM or Splunk.

Responsibilities

• Monitor and analyze security alerts and events from SIEM, firewalls, IDS/IPS, EDR, antivirus, and other platforms.
• Continuously monitor network, endpoints, servers, and cloud infrastructure for suspicious activity and incidents.
• Investigate incidents including phishing, malware, unauthorized access attempts, ransomware, and policy violations.
• Perform alert triage, validation, escalation, and incident response per SOC procedures.

Skills

Analytical skills

Communication skills

Attention to detail

Problem-solving

Education

Bachelor's degree in IT / CS / Cybersecurity

Tools

Python

PowerShell

FortiSIEM

Splunk

Job description

2 - 5 Years

Job Description

General Information

Designation: Security Operations Center Analyst

Department: Corporate IT

Work Assignment: Office-based

Job Summary

Position description: The Security Operations Center (SOC) Analyst is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats and security incidents across the organization's IT infrastructure, systems, networks, and endpoints.

Primary Responsibilities

• Monitor and analyze security alerts and events generated from SIEM, firewalls, IDS/IPS, EDR, antivirus, and other security platforms.
• Conduct continuous monitoring of network, endpoint, server, cloud, and security infrastructure to identify suspicious activities and potential security incidents.
• Investigate security incidents including phishing, malware infections, unauthorized access attempts, account compromise, ransomware, and policy violations.
• Perform alert triage, validation, escalation, and incident response activities following established SOC procedures and escalation matrix.
• Analyze logs, network traffic, and endpoint activities to identify indicators of compromise (10Cs) and malicious behavior.
• Support threat hunting activities to proactively identify hidden threats within the environment.
• Assist in tuning SIEM correlation rules and reducing false positives to improve monitoring efficiency.
• Participate in vulnerability monitoring, remediation tracking, and validation activities.
• Coordinate with Infrastructure, Network, System Administration, and IT Operations teams during security investigations and incident remediation.
• Maintain proper documentation of incidents, investigations, root cause analysis, and response actions.
• Prepare daily, weekly, and monthly SOC operational and incident reports.
• Ensure compliance with company security policies, operational procedures, and cybersecurity best practices.

Qualifications

• Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, or related field
• Relevant cybersecurity certifications are an advantage
• Minimum of 2 years experience in Security Operations Center (SOC), Cybersecurity Operations, or Information Security
• Experience working with SIEM platforms such as FortiSIEM, Splunk, or equivalent
• Experience in incident detection, investigation, and response
• Knowledge in Windows, Linux, Active Directory, networking, and server administration
• Understanding of common cyber attack techniques including phishing, malware, ransomware, brute force attacks, and DDoS
• Experience in log analysis and event correlation
• Familiar with cybersecurity frameworks and standards such as NIST CSF and ISO 27001
• Strong analytical and problem-solving skills
• Good understanding of cybersecurity concepts and incident handling procedures
• Excellent oral and written communication skills
• Attention to detail and strong documentation skills
• Background in scripting. Python, or PowerShell is an advantage

Preferred Certifications

• CompTIA Security+
• Fortinet NSE / FCF Certifications
• Certified SOC Analyst (CSA) or equivalent
• Certified Ethical Hacker (CEH) or equivalent

Job Snapshot

Updated Date

11/04/2026