Senior SOC Analyst

Amihan Solutions; Central Luzon; Hybrid; PHP 900,000 - 1,300,000; Full time

Benefits offered by this job

Hybrid working arrangements

HMO health insurance

Company-sponsored training and certific

Modern IT equipment

Welcome gift and company merchandise

Job summary

Amihan Solutions is seeking an experienced Level 2/3 SOC Analyst to join an international Cyber Defence team. The role involves investigating security alerts, events, and incidents, and coordinating responses to safeguard customer IT environments.

Hybrid work options with office locations in the Philippines and remote work from home are available, along with global collaboration. The ideal candidate will have strong knowledge of security tools (SOAR, XDR, SIEM), programming in Python, and a

Qualifications

• Advanced vocational or tertiary education in information security or several years of cybersecurity experience.
• Experience with SOAR, XDR, and SIEM solutions (Palo Alto Networks and/or Microsoft preferred).
• Knowledge of coding and programming languages, such as Python.

Responsibilities

• Investigate security alerts, events, and incidents escalated to the SOC.
• Monitor and analyse log data, network activity, and security events with various tools.
• Identify patterns and anomalies to detect and defend against cyberattacks.
• Proactively hunt for threats and conduct event-driven threat hunting for customers.
• Contribute to the Cyber Defence Center's improvements and services.

Skills

Python

SOAR

XDR

SIEM

Education

Advanced vocational or tertiary education in information security

Tools

Palo Alto Networks

Microsoft security tools

Job description

We're looking for an experienced Level 2 or Level 3 SOC Analyst to join our client's international Cyber Defence team. Headquartered in Switzerland, our client is a leading provider of IT solutions and services, expanding its global team to meet growing demand.

In this role, you'll investigate security alerts, events, and incidents escalated to the SOC by security analytics platforms as part of our client's Cyber Defence services. You'll assess threats, coordinate response measures, and help protect customers IT environments. Join a collaborative international team where your expertise will make a meaningful impact on customers security.

Responsibilities

• Handle Level 2 and Level 3 security cases as a member of the Blue Team.
• Monitor and analyse log data, network and system activity, and security events generated by a range of security tools.
• Identify suspicious patterns and anomalies to detect and defend against cyberattacks.
• Proactively hunt for hidden threats and conduct event-driven threat hunting for customers.
• Contribute to the continuous improvement of the Cyber Defence Center (CDC), its systems, and its services.
• Analyse threat intelligence feeds, track cybercrime trends, and recommend appropriate protective measures.
• Perform security operations tasks, including health checks, policy reviews, and release management.
• Implement and coordinate mitigation measures in close collaboration with internal stakeholders and customers.
• Support customers as part of the security analysis service, working closely with the Service Manager.
• Participate in the cybersecurity on-call rota to support 24/7 coverage.

Qualifications

• Advanced vocational or tertiary education in information security, or several years of proven cybersecurity experience supported by relevant certifications.
• Experience with SOAR, XDR, and SIEM solutions, preferably from Palo Alto Networks and/or Microsoft.
• Knowledge of ing and programming languages, such as Python.
• Foundational knowledge of Windows, Linux, and macOS, as well as firewalls, IDS/IPS, proxy solutions, antivirus and anti-spam technologies, network architectures, and protocols such as TCP/IP, DNS, HTTP/HTTPS, and SMTP.
• A strong customer and service focus, with a high degree of personal responsibility and the ability to work independently.
• Strong analytical, problem-solving, and organisational skills.
• Curiosity and a commitment to continuous learning in cybersecurity.
• Flexibility to work fixed day shifts, including weekends and public holidays.

Benefits

• A supportive team and a company committed to your career development.
• A competitive salary aligned with the local market.
• Hybrid working arrangements, with access to several office locations across the Philippines and the option to work from home.
• 25 days of leave per year, available from your first working day and prorated as applicable.
• HMO health insurance coverage.
• A company mobile phone with an unlimited data plan.
• Company-sponsored training and certifications.
• Modern IT equipment, a welcome gift, and company merchandise.
• An international working environment with regular team check-ins and virtual social events.