Security Operations Engineer - Threat Detection & Response

Ibex Limited; Mandaluyong; Hybrid; PHP 420,000 - 580,000; Full time

Job summary

Ibex Limited is seeking an IT Security Operations Analyst to monitor security dashboards, investigate threats, and coordinate incident response with IT teams. You will review IOCs, support vulnerability remediation, and help maintain compliance across security controls and frameworks.

The role supports threat hunting, SIEM/EDR tuning, and continuous improvement of SOC processes within a cloud-aware environment. Strong RCA and automation skills are valued.

Qualifications

• Experience in core SOC operations and incident handling.
• Knowledge of vulnerability management and security hardening.
• Familiarity with detection engineering and threat intelligence.
• Ability to automate incident escalation and root cause analysis.
• Actively guide Level-1 SOC Analysts during escalation.

Responsibilities

• Oversee daily monitoring of security dashboards, alerts, and events.
• Review threats, risks, and indicators of compromise (IOCs).
• Coordinate with IT for investigation, containment, and resolution.
• Perform log review to support investigations and visibility.
• Manage security incidents from identification to closure with documentation.
• Ensure SLA-aligned ticket handling in the eService system.
• Review tickets daily for closure quality and accuracy.
• Validate incident resolutions with supporting docs.

Skills

Security Monitoring & IncidentHandling

Vulnerability Management

Detection Engineering

Automation for RCA & escalation

L1 SOC escalation guidance

Tools

SIEM

EDR

MITRE/IDS

Job description

Ibex Limited is seeking an IT Security Operations Analyst to monitor security dashboards, investigate threats, and coordinate incident response with IT teams. You will review IOCs, support vulnerability remediation, and help maintain compliance across security controls and frameworks.

The role supports threat hunting, SIEM/EDR tuning, and continuous improvement of SOC processes within a cloud-aware environment. Strong RCA and automation skills are valued.