Senior Analyst, Cyber Security Operations

Melco Resorts & Entertainment Limited; Manila; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Melco Resorts & Entertainment Limited in Manila seeks a Senior Analyst, Cyber Security Operations to serve as a critical escalation point within the CSOC. The role involves advanced analysis, incident handling, and in-depth investigations of security events while mentoring CSOC Analysts.

You will collaborate with internal and external teams to refine CSOC processes, tune SIEM and EDR tools, perform threat hunting, and contribute to post-incident reviews to strengthen the organization’s security

Qualifications

• Advanced understanding of network protocols and traffic analysis.
• Experience with SIEM/EDR for monitoring and threat detection.
• Strong incident response lifecycle knowledge and forensics basics.
• Programming/scripting skills to automate SOC workflows.
• Excellent analytical and communication abilities.

Responsibilities

• Conducts advanced analysis of security incidents escalated from CSOC analysts.
• Develops containment and mitigation strategies for active incidents.
• Oversees tuning of SIEM and EDR tools to reduce false positives.
• Mentors CSOC analysts to improve triage and event handling.
• Prepares detailed incident reports for management and stakeholders.
• Collaborates to remediate vulnerabilities and strengthen security posture.
• Participates in post-incident reviews to capture lessons learned.
• Evaluates new tools and technologies for the CSOC.

Skills

TCP/IP

Network analysis

Packet capture

SIEM tools

EDR solutions

Windows

Linux/UNIX

Threat intelligence

Scripting (Python)

Incident response

Education

BS in Computer Science/IS

Tools

Splunk

QRadar

ArcSight

Wireshark

EDR

Job description

## Senior Analyst, Cyber Security OperationsApplylocations: City of Dreams Manilatime type: Full timeposted on: Posted Todaytime left to apply: End Date: June 11, 2026 (29 days left to apply)job requisition id: REQ14603REQ14603 Senior Analyst, Cyber Security Operations (Open)**POSITION SUMMARY:**The Senior Analyst, Cyber Security Operations acts as a critical escalation point within the Cyber Security Operations Center (CSOC) team. He/she is responsible for advanced analysis, incident handling, and in-depth investigations of security events. The analyst serves as a mentor to CSOC Analysts and provides guidance and expertise for complex security incidents. Additionally, he/she collaborates with internal and external teams to refine and improve CSOC processes, leveraging advanced tools and techniques to safeguard the organization’s digital assets against threats.**PRIMARY RESPONSIBILITIES:**Conducts advanced analysis of security incidents escalated from CSOC Analysts, leveraging all available Security Operations Center log sources, including but not limited to:FirewallsSystems and Network DevicesWeb ProxiesIntrusion Detection/Prevention SystemsAntivirus Systems and EDR Solutions* Performs in-depth investigations to determine root causes, scope, and impact of security incidents.* Develops and executes containment and mitigation strategies for active incidents and ensures incidents are properly documented.* Provides guidance to CSOC Analysts, helping to improve triage processes and event handling.* Oversees tuning and optimization of Security Information and Event Management (SIEM) tools, including Endpoint Detection and Response (EDR) solutions to reduce false positives and improve detection accuracy.* Proactively identifies and analyzes potential threats by leveraging threat intelligence sources, hunting for malicious activities, and identifying anomalies in the environment.* Conducts forensic analysis and malware analysis as needed to support incident response efforts.* Prepares detailed incident reports and findings for management and stakeholders.* Acts as a key contributor to the development and maintenance of CSOC procedures, playbooks, and processes.* Collaborates with other teams to remediate vulnerabilities, strengthen security posture, and improve monitoring strategies.* Participates in post-incident reviews, identifying gaps and lessons learned to enhance the organization’s incident response capabilities.* Assists with the evaluation and implementation of new tools and technologies for the CSOC.* Serves as a technical escalation point for all security-related events and incidents.* Provides training and mentorship to CSOC Analysts to improve overall team capability and performance.**QUALIFICATIONS:****Experience**3 to 5 years of experience in IT or cybersecurity, with at least 2 years of direct SOC experience or incident response.**Education**BS in Computer Science, IS, or related field or three years of equivalent experience.Must have at least one relevant certification in cybersecurity, such as CompTIA Security+, Certified Ethical Hacker (CEH), GIAC Security Essentials (GSEC), or equivalent.**Skills / Competencies*** Advanced understanding of TCP/IP, UDP, DNS, FTP, NetBIOS, and other protocols.* Strong expertise in network analysis, net flow analysis, and packet capture tools (e.g., Wireshark).* Proficiency in SIEM tools (e.g., Splunk, QRadar, ArcSight), and EDR solutions for monitoring and advanced threat detection.* Strong knowledge of Windows, Linux, and UNIX operating systems.* Deep understanding of threat intelligence platforms and their application in proactive threat detection.* Strong familiarity with exploit frameworks, vulnerabilities, and attack vectors.* Advanced understanding of the incident response lifecycle and forensic principles.* Knowledge of malware analysis and reverse engineering techniques.* Strong analytical and problem-solving skills, with the ability to perform root-cause analysis.* Knowledge of scripting or automation tools (e.g., Python, PowerShell) to enhance SOC workflows.* Ability to assess risks and provide recommendations to improve the organization’s security posture.* Strong project management skills, with the ability to manage multiple priorities effectively.**Other Attributes*** Detail-oriented and able to handle high-pressure situations effectively.* Excellent written and verbal communication skills for reporting and collaboration.* Self-starter and independent thinker with the ability to work collaboratively in a team environment.* Demonstrates leadership qualities, with the ability to mentor junior analysts.* Displays the highest level of integrity and commitment to delivering results.* Adaptable to changing priorities and able to work in a fast-paced environment.