Security Operations Center Analyst (Las Pinas)

TaskUs; Las Piñas; On-site; PHP 360,000 - 720,000; Full time

Benefits offered by this job

Benefits package

Professional development

Internal mobility

Job summary

TaskUs in Las Piñas, Philippines, seeks a SOC Analyst 1 to join our Security Operations Center. You will triage alerts, investigate incidents, and support threat-hunting efforts across endpoints, networks, and cloud services.

Responsibilities include tuning detection rules, maintaining playbooks, and documenting findings for leadership reviews. The role requires clear written and verbal communication on customer calls and a 100% on-site work setup with a shifting schedule.

Qualifications

• At least 1 year in SOC or cybersecurity analyst role.
• Experience investigating security events across endpoint, network, and cloud.
• Strong knowledge of NIST, MITRE ATT&CK, CIS Controls, and Cyber Kill Chain.
• Hands-on with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or LogRhythm.
• Experience with EDR solutions such as Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, or Carbon Black.
• Knowledge of networking protocols, operating systems, authentication technologies, and cloud security concepts.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication skills (you will be on customer calls).

Responsibilities

• Investigate security alerts and suspicious activities from client security stack, third-party tools, and cloud platforms.
• Perform detailed investigations into security alerts, attacker techniques, and identify emerging threats.
• Correlate events from multiple security tools and data sources to determine risk, business impact, and required remediation actions.
• Assist with developing and maintaining detection rules, use cases, playbooks, and response procedures.
• Validate security events and reduce false positives through tuning and optimization of monitoring tools.
• Assist with preparing post-event reports, executive summaries, and technical documentation.
• Stay current on threat intelligence, attacker tactics, techniques, and procedures (TTPs), and emerging cybersecurity trends.

Skills

SIEM experience

EDR experience

Threat analysis

Networking fundamentals

Cloud security

Analytical thinking

Communication skills

Education

Bachelor's in Cybersecurity/IT/CS

Tools

Microsoft Sentinel

Splunk

QRadar

LogRhythm

Microsoft Defender for Endpoint

CrowdStrike

SentinelOne

Carbon Black

Job description

About TaskUs: TaskUs is a provider of outsourced digital services and next-generation customer experience to fast-growing technology companies, helping its clients represent, protect and grow their brands. Leveraging a cloud-based infrastructure, TaskUs serves clients in the fastest-growing sectors, including social media, e-commerce, gaming, streaming media, food delivery, ride-sharing, HiTech, FinTech, and HealthTech.

TaskUs People First culture has grown the company to have approximately 45K employees worldwide. We are currently in twenty-three locations across twelve countries, including the Philippines, India, and the United States.

It started with one ridiculously good idea to create a different breed of Business Processing Outsourcing (BPO)! We at TaskUs understand that achieving growth for our partners requires a culture of constant motion, exploring new technologies, being ready to handle any challenge at a moment’s notice, and mastering consistency in an ever-changing world.

What We Offer: TaskUs provides world-class benefit packages with competitive industry salaries to all its employees. With well-developed departments, such as Total Rewards, Wellness, HR, and Diversity, we continuously thrive in supporting a People First culture. We are known for our inclusiveness and community impact. We also promote internal mobility and professional development at every step of an employee's career within TaskUs. Come be part of TaskUs that supports People First by applying today!

What can you expect in a Security Operations Center Analyst role with TaskUs

Our client's Security Operations Center (SOC) currently monitors approximately 65,000 global organizations, 2 million endpoints, and 3 million mailboxes/users from 3 SOC locations. The SOC Analyst 1 serves as an initial triage and alert review point for security events and alerts from our security tools. This role is responsible for conducting in-depth investigations, performing threat analysis, containing attacks, and assisting with improving detection capabilities.

Key Responsibilities:

• Investigate security alerts and suspicious activities from our client’s own security stack, 3rd party tools, and cloud platforms.
• Perform detailed investigations into security alerts, attacker techniques, and identify emerging threats.
• Correlate events from multiple security tools and data sources to determine risk, business impact, and required remediation actions.
• Assist with developing and maintaining detection rules, use cases, playbooks, and response procedures.
• Validate security events and reduce false positives through tuning and optimization of monitoring tools.
• Assist with preparing post-event reports, executive summaries, and technical documentation.
• Stay current on threat intelligence, attacker tactics, techniques, and procedures (TTPs), and emerging cybersecurity trends.

Required Qualifications:

• At least 1 year of experience in a Security Operations Center, Incident Response, or Cybersecurity Analyst role.
• Experience investigating security events across endpoint, network, and cloud platforms.
• Strong understanding of cybersecurity frameworks such as NIST, MITRE ATT&CK, CIS Controls, and Cyber Kill Chain.
• Hands-on experience with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or LogRhythm.
• Experience with endpoint detection and response (EDR) solutions such as Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, or Carbon Black.
• Knowledge of networking protocols, operating systems, authentication technologies, and cloud security concepts.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication skills (you will be on customer calls).

Preferred Qualifications:

• Security certifications such as Security+, CySA+, GCIH, GCIA, GCFA, SC-200, CISSP, or equivalent.
• Experience with Microsoft security technologies including Defender XDR, Sentinel, Entra ID, and Microsoft 365 security solutions.
• Experience with scripting or automation using PowerShell, Python, KQL, or similar languages.
• Knowledge of digital forensics and incident response methodologies. Experience supporting cloud environments such as Azure, AWS, or Google Cloud Platform.

Success Measures:

• Timely identification and resolution of security incidents.
• Reduction of false-positive alerts through continuous tuning.
• Improvement of detection coverage and threat visibility.
• Contributions to security process improvements, team education, and operational maturity.

Education / Certifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field; equivalent experience may be considered.

Work Location / Work Schedule / Travel:

• Las Pinas office (Hiraya)
• 100% On-site Work setup
• Shifting Schedule (subject to change, as needed)

DEI

In TaskUs we believe that innovation and higher performance are brought by people from all walks of life. We welcome applicants of different backgrounds, demographics, and circumstances. Inclusive and equitable practices are our responsibility as a business. TaskUs is committed to providing equal access to

opportunities. If you need reasonable accommodations in any part of the hiring process, please let us know.