Senior Security Operations Analyst – Threat Response

Eastvantage Careers; Mandaluyong; On-site; PHP 1,339,000 - 2,344,000; Full time

Benefits offered by this job

Upskilling programs (EV Academy)

Great Place to Work recognition

Job summary

Eastvantage Careers in Mandaluyong seeks a Senior Service Desk Analyst – Security Operations to lead complex security incident investigations, strengthen threat detection, and guide the team across endpoint, cloud, and identity security environments.

You will work onsite initially, transitioning to a hybrid setup, while mentoring junior analysts and refining detection rules and playbooks. A strong cybersecurity background, 5+ years in SOC/IR, and hands-on EDR/XDR experience are essential.

Qualifications

• 5+ years hands-on cybersecurity, SOC, or incident response experience.
• At least 2 years in an L2/Senior Analyst or equivalent role.
• Strong experience with security alert triage, threat investigation, containment, escalation, and root cause analysis.
• Hands-on experience with EDR/XDR platforms (CrowdStrike Falcon and/or Defender XDR).
• Familiar with SIEM, Entra ID/Azure AD, endpoint and cloud security; threat hunting.

Responsibilities

• Lead advanced threat triage and investigate complex security incidents.
• Utilize EDR/XDR platforms to investigate threats and contain endpoints.
• Analyze Darktrace analytics and network telemetry for anomalies.
• Conduct RCA, forensics, and incident lifecycle management.
• Investigate identity-based threats across Entra ID/Azure AD environments.
• Tune detection rules, alert correlation, and automate incident response playbooks.
• Maintain incident reports, forensics docs, and SOPs.
• Mentor junior analysts and ensure adherence to SLAs.

Skills

Analytical thinking

Problem solving

Communication

Technical documentation

Education

Bachelor's degree in Cybersecurity/IT

Tools

CrowdStrike Falcon

Microsoft Defender XDR

Darktrace

SIEM

Entra ID / Azure AD

Job description

Eastvantage Careers in Mandaluyong seeks a Senior Service Desk Analyst – Security Operations to lead complex security incident investigations, strengthen threat detection, and guide the team across endpoint, cloud, and identity security environments.

You will work onsite initially, transitioning to a hybrid setup, while mentoring junior analysts and refining detection rules and playbooks. A strong cybersecurity background, 5+ years in SOC/IR, and hands-on EDR/XDR experience are essential.