Security Operations L1 Analyst - 24/7 SIEM Triage

solaireresort; Parañaque; On-site; PHP 300,000 - 540,000; Full time

Job summary

solaireresort is seeking a Security Operations Analyst in the Philippines to monitor SIEM dashboards, alerts, and security events across network, endpoint, cloud, and applications on a 24/7 shift rotation. You will conduct initial triage, classify incidents, and prioritize findings following documented playbooks and runbooks.

You will escalate validated or complex incidents to SOC L2 with detailed documentation, perform routine health checks on monitoring tools, and maintain thorough shift

Qualifications

• Bachelor’s degree in computer science, information technology, or a related field, or equivalent practical experience.
• 0–2 years in security operations, IT support, or network/system administration; prior SOC or managed security service experience preferred.
• Must be willing to work on a 24/7 shift rotation.

Responsibilities

• Monitor SIEM dashboards, alerts, and security events on a 24/7 shift rotation.
• Perform initial triage, classification, and prioritization of security alerts using playbooks.
• Escalate incidents to SOC L2 with documentation of findings and actions taken.
• Record alerts, investigations, and actions in the case management system.
• Conduct routine health checks on monitoring tools and report gaps in log sources or detection coverage.
• Triage phishing reports and user security concerns per playbook.
• Execute containment actions during active incidents.
• Contribute tuning recommendations to reduce false positives.
• Maintain complete shift handover logs.

Skills

Networking basics

Windows

Linux

MITRE ATT&CK knowledge

SIEM familiarity

Ticketing tools

Phishing response

Education

Bachelor's degree in computer science or related field

Tools

Splunk

Microsoft Sentinel

QRadar

Job description

solaireresort is seeking a Security Operations Analyst in the Philippines to monitor SIEM dashboards, alerts, and security events across network, endpoint, cloud, and applications on a 24/7 shift rotation. You will conduct initial triage, classify incidents, and prioritize findings following documented playbooks and runbooks.

You will escalate validated or complex incidents to SOC L2 with detailed documentation, perform routine health checks on monitoring tools, and maintain thorough shift