Senior GSOC Cyber Defense Analyst | Incident Response Lead

WTW; Taguig; Sur place; PHP 1 200 000 - 1 800 000; Plein temps

Résumé du poste

WTW is seeking an experienced L3 Cyber Defence Analyst to join the Global Security Operations Centre in the Philippines. You will oversee triage, investigation, containment and eradication of security threats to protect our critical data and assets, and to ensure a rapid, coordinated response to incidents.

Lead the GSOC team in log analysis using SIEM, UEBA and EDR, drive automation, coach Level 1/2 analysts, and communicate clearly with technical and non‑technical stakeholders.

Qualifications

• 6+ years in a mature cyber defence or SOC.
• Strong troubleshooting & communication under pressure.
• Solid time management and dependability.
• Hands-on experience with SIEM, UEBA, and EDR as a Level 3 analyst.
• Experience leading investigations and speaking to stakeholders.
• Strong written and verbal communication; reports in a structured format.
• MSc in security field or equivalent.
• Curiosity with responsibility for learning and self-development.
• Knowledge of networking protocols (TCP/IP/HTTP).
• Experience with scripting/tools to enhance investigations, e.g., Python/PowerShell.
• Experience with advanced investigation techniques (network forensics, endpoint forensics, memory analysis, log analysis).

Responsabilités

• Oversee monitoring, investigation, containment, and eradication of cyber threats against the business.
• Lead GSOC in log analysis using SIEM/UEBA/EDR to identify security issues.
• Determine response to mitigate damage and prevent spread of threats.
• Escalate high-priority incidents and ensure timely monitoring and handling.
• Coordinate with technical teams and business areas during incidents.
• Represent GSOC in incident stand‑up calls and support escalation.
• Use threat intelligence to adapt detection approaches.
• Improve efficiency via tuning, automation playbooks, and technology use.
• Review Level 1/2 analyses and provide process/technical advice.
• Attend handover calls to support Level 1/2 analysts; mentor teams.
• Provide on‑call support in rotation for high-priority alerts.

Connaissances

SIEM

UEBA

EDR

Incident response

Log analysis

Leadership

Communication skills

Troubleshooting

Networking basics

Linux/Unix

Windows

Formation

MSc in security

Outils

Wireshark

EnCase

X-Ways

PowerShell

Python

NetWitness

Description du poste

WTW is seeking an experienced L3 Cyber Defence Analyst to join the Global Security Operations Centre in the Philippines. You will oversee triage, investigation, containment and eradication of security threats to protect our critical data and assets, and to ensure a rapid, coordinated response to incidents.

Lead the GSOC team in log analysis using SIEM, UEBA and EDR, drive automation, coach Level 1/2 analysts, and communicate clearly with technical and non‑technical stakeholders.