Security Operations Center (SOC) Analyst - Hybrid - Mid Shift

APEX Fintech Services; Manila; Hybride; PHP 350 000 - 520 000; Plein temps

Avantages offerts par ce poste

Night differential

Hybrid in Manila

Résumé du poste

Apex Fintech Solutions is seeking a Security Operations Center specialist to monitor, triage, and investigate security alerts in real time using SIEM, EDR, and DLP tools. You will correlate events, provide Tier 1/2 incident response, and support remediation efforts with the Threat and Vulnerability Management team.

You will generate reports, communicate with stakeholders, and maintain incident documentation while working in a hybrid setup in Manila.

Qualifications

• Bachelor's degree in Security, Forensics, Cyber Security, or CS or equivalent experience.
• 2+ years in security operations or related info security role, Tier 1/2 preferred.
• Knowledge of security frameworks such as MITRE ATT&CK and Kill Chain.
• Familiar with TCP/IP, DNS, HTTP, and email security concepts.
• Certifications such as GCIA, GCIH, GCFA, OSCP are a plus.

Responsabilités

• Monitor, triage, and investigate security alerts in real time using SIEM, UEBA, EDR, DLP, and cloud tools.
• Correlate events from multiple sources and provide incident response support.
• Escalate and assist remediation of critical security incidents.
• Support threat hunting and analyze emerging threats with T&M team.
• Generate reports, dashboards, and metrics for security operations.
• Communicate updates to senior management and maintain incident documentation.
• Participate in on-call rotations including nights and weekends.

Connaissances

SIEM

EDR

DLP

Threat intel

Incident response

Formation

Bachelor's degree in Security, Forensics, Cyber Security or CS

Outils

SOAR

Firewalls

NIDS/NIPS/HIDS/HIPS

Cloud security

Description du poste

WHO WE ARE

Apex Fintech Solutions (Apex) powers innovation and the future of digital wealth management by building tech-forward solutions that help simplify, automate, and facilitate access to financial markets for all. Our robust suite of fintech software enables us to support clients such as Stash, Betterment, SoFi, Webull, and eToro, amongst many others; collectively, Apex powers access to the stock market for over 22+ million end customers.

At Apex, we are changing how the securities industry operates by reinventing the status quo, which was manual, slow, and accessible only by the ultra-wealthy. We're digitizing and democratizing systems so that everyone has an opportunity to invest.

When you're at Apex, you drive this change. You're part of a global team with a clear vision: to be the trusted technology that powers the digital economy. Our offices in Austin, Dallas, Chicago, New York, Portland, Belfast, and Manila are home to over 1,000 employees.

Together, we're shaping the future of financial innovation. Embrace change. Solve big. Win together. And be G.R.E.A.T. - grit, results, empathy, accountability, and teamwork - with Apex.

We're proud to be recognized for the innovative work we do, the purpose-driven nature of our work, and the collaborative culture we've created. Here are just a few of the many awards we've recently received:

• Best Places to Work 2026, 2025, 2024, 2023 - Presented by BuiltIn
• WealthTech of the Year 2025 - Presented by US FinTech Awards
• The World's Top 250 Fintech Companies 2024 - Presented by CNBC

ABOUT THIS ROLE

Responsibilities

• Monitor, triage, and investigate security alerts and events in real time using SIEM, UEBA, EDR, DLP, network monitoring, email security, vulnerability, cloud, and threat intelligence tools
• Correlate and analyze events using information gathered from a variety of sources across the enterprise
• Provide Tier 1 and Tier 2 support, escalating and assisting in the remediation of critical security incidents
• Provide Incident Response (IR) support when analysis confirms an actionable incident
• Complete clear, documented handovers at the end of each shift so open alerts and incidents continue without delay
• Support threat hunting and analyze emerging threats and newly disclosed vulnerabilities, working with the Threat and Vulnerability Management team
• Analyze trends in security log data from many different security devices across multiple layers
• Respond to custom security detections, signatures, and correlations, suggest alert and playbook enhancements that improve detection capability
• Generate reports, dashboards, and metrics from security technologies
• Communicate with internal stakeholders, including senior management, to provide updates on security incidents and confirm resolution
• Maintain security documentation, including incident reports, knowledge base articles, and operational playbooks
• Share information and integrate technologies with other analysts and teams
• Take part in internal projects that improve SOC efficiency and tooling
• Improve and challenge existing processes and procedures in a changing security environment
• Participate in on-call rotations, which includes shift hours and weekends.
• Participate in on-call rotations, which includes shift hours and weekends.

Shift Work and Working Conditions

Shift: 3pm - 11pm Manila Time

Work a shift pattern that covers the SOC 24 hours a day, seven days a week

Shifts include evenings and overnight hours

Be available for call-out or on-call support outside scheduled shifts when required

Work will be hybrid - 2x in office setup in BGC

Night differential are provided in line with company policy and Philippine labor regulations

Core Qualifications

• Bachelor's degree in a related field (Security, Forensics, Cyber Security, or Computer Science preferred) or equivalent industry experience
• At least two years of experience in a security operations or related information security role, ideally at Tier 1 or Tier 2 level
• Desirable: experience as a security analyst, incident handler or responder, security engineer, or penetration tester
• Knowledge of security methodologies and frameworks, such as the Cyber Kill Chain, the Diamond Model, and MITRE ATT&CK and D3FEND
• Knowledge of technical security solutions, including firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavior analytics, orchestration, automation, and cloud security
• Strong knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS, and HTTP protocols, network analysis, network and security applications, and email security
• Good knowledge of common malware threats and attack methods
• Basic knowledge of scripting and programming languages, such as PowerShell, Python, Bash, .NET, Ruby, Java, or C
• Willingness and ability to work rotating shifts, including nights, weekends, and public holidays
• Desirable professional certifications: GCIA, GCIH, GCFE, GCFA, Security+, CCNA CyberOps, OSCP, GPEN, GWAPT, CEH, CySA+

Core Competencies

Communicate clearly i