Security Operations Center Analyst (Las Piñas)

TaskUs; Las Piñas; On-site; PHP 500,000 - 750,000; Full time

Job summary

TaskUs is seeking a Security Operations Center Analyst to join our on-site team in Las Piñas. The role involves triage, investigation, and containment of security events, while contributing to detection improvements and incident response activities.

You will work with clients on security alerts, perform in-depth threat analyses, and help refine playbooks and reporting. A strong background in cybersecurity fundamentals and hands-on SIEM/EDR experience are essential.

Qualifications

• 1+ year of experience in a Security Operations Center, Incident Response, or Cybersecurity Analyst role.
• Experience investigating security events across endpoint, network, and cloud platforms.
• Strong understanding of cybersecurity frameworks such as NIST, MITRE ATT&CK, CIS Controls, and Cyber Kill Chain.
• Hands-on experience with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or LogRhythm.
• Experience with endpoint detection and response (EDR) solutions such as Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, or Carbon Black.
• Knowledge of networking protocols, operating systems, authentication technologies, and cloud security concepts.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication skills (you will be on customer calls).

Responsibilities

• Investigate security alerts and suspicious activities from our client’s security stack, 3rd party tools, and cloud platforms.
• Perform detailed investigations into security alerts, attacker techniques, and identify emerging threats.
• Correlate events from multiple security tools and data sources to determine risk, business impact, and required remediation actions.
• Assist with developing and maintaining detection rules, use cases, playbooks, and response procedures.
• Validate security events and reduce false positives through tuning and optimization of monitoring tools.
• Assist with preparing post-event reports, executive summaries, and technical documentation.
• Stay current on threat intelligence, attacker tactics, techniques, and procedures (TTPs), and emerging cybersecurity trends.

Skills

SOC Experience

SIEM Tools

EDR Tools

Networking concepts

Cloud security

Communication

Threat analysis

Education

Bachelor's degree in Cybersecurity

Tools

Microsoft Sentinel

Splunk

QRadar

LogRhythm

Defender for Endpoint

CrowdStrike

SentinelOne

Job description

About TaskUs:

TaskUs is a provider of outsourced digital services and next-generation customer experience to fast-growing technology companies, helping its clients represent, protect and grow their brands. Leveraging a cloud-based infrastructure, TaskUs serves clients in the fastest-growing sectors, including social media, e-commerce, gaming, streaming media, food delivery, ride-sharing, HiTech, FinTech, and HealthTech.

TaskUs People First culture has grown the company to have approximately 45K employees worldwide. We are currently in twenty-three locations across twelve countries, including the Philippines, India, and the United States.

It started with one ridiculously good idea to create a different breed of Business Processing Outsourcing (BPO)! We at TaskUs understand that achieving growth for our partners requires a culture of constant motion, exploring new technologies, being ready to handle any challenge at a moment’s notice, and mastering consistency in an ever-changing world.

What We Offer:

TaskUs provides world-class benefit packages with competitive industry salaries to all its employees. With well-developed departments, such as Total Rewards, Wellness, HR, and Diversity, we continuously thrive in supporting a People First culture. We are known for our inclusiveness and community impact. We also promote internal mobility and professional development at every step of an employee's career within TaskUs.

What can you expect in a Security Operations Center Analyst role with TaskUs

Our client's Security Operations Center (SOC) currently monitors approximately 65,000 global organizations, 2 million endpoints, and 3 million mailboxes/users from 3 SOC locations. The SOC Analyst 1 serves as an initial triage and alert review point for security events and alerts from our security tools. This role is responsible for conducting in-depth investigations, performing threat analysis, containing attacks, and assisting with improving detection capabilities.

Key Responsibilities:

• Investigate security alerts and suspicious activities from our client’s own security stack, 3rd party tools, and cloud platforms.
• Perform detailed investigations into security alerts, attacker techniques, and identify emerging threats.
• Correlate events from multiple security tools and data sources to determine risk, business impact, and required remediation actions.
• Assist with developing and maintaining detection rules, use cases, playbooks, and response procedures.
• Validate security events and reduce false positives through tuning and optimization of monitoring tools.
• Assist with preparing post-event reports, executive summaries, and technical documentation.
• Stay current on threat intelligence, attacker tactics, techniques, and procedures (TTPs), and emerging cybersecurity trends.

Required Qualifications:

• At least 1 year of experience in a Security Operations Center, Incident Response, or Cybersecurity Analyst role.
• Experience investigating security events across endpoint, network, and cloud platforms.
• Strong understanding of cybersecurity frameworks such as NIST, MITRE ATT&CK, CIS Controls, and Cyber Kill Chain.
• Hands-on experience with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or LogRhythm.
• Experience with endpoint detection and response (EDR) solutions such as Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, or Carbon Black.
• Knowledge of networking protocols, operating systems, authentication technologies, and cloud security concepts.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication skills (you will be on customer calls).

Preferred Qualifications:

• Security certifications such as Security+, CySA+, GCIH, GCIA, GCFA, SC-200, CISSP, or equivalent.
• Experience with Microsoft security technologies including Defender XDR, Sentinel, Entra ID, and Microsoft 365 security solutions.
• Experience with scripting or automation using PowerShell, Python, KQL, or similar languages.
• Knowledge of digital forensics and incident response methodologies. Experience supporting cloud environments such as Azure, AWS, or Google Cloud Platform.

Success Measures:

• Timely identification and resolution of security incidents.
• Reduction of false-positive alerts through continuous tuning.
• Improvement of detection coverage and threat visibility.
• Contributions to security process improvements, team education, and operational maturity.

Education / Certifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field; equivalent experience may be considered.

Work Location / Work Schedule / Travel:

• Las Pinas office (Hiraya)
• 100% On-site Work setup
• Shifting Schedule (subject to change, as needed)

How We Partner To Protect You:

TaskUs will neither solicit money from you during your application process nor require any form of payment in order to proceed with your application. Kindly ensure that you are always in communication with only authorized recruiters of TaskUs.

DEI:

In TaskUs we believe that innovation and higher performance are brought by people from all walks of life. We welcome applicants of different backgrounds, demographics, and circumstances. Inclusive and equitable practices are our responsibility as a business. TaskUs is committed to providing equal access to opportunities. If you need reasonable accommodations in any part of the hiring process, please let us know.