Senior SOC Analyst

N-able; Taguig; On-site; PHP 800,000 - 1,000,000; Full time

Benefits offered by this job

Medical and dental insurance

Generous PTO and holidays

Employee Stock Purchase Program

Pension with company-contribution

Internet allowance

Job summary

N-able is seeking a Security Operations Analyst to join its SOC team in the Philippines. You will monitor, investigate, and triage security events, leveraging SIEM and diverse data sources to identify threats and escalate where needed.

The role requires 5+ years in a SOC and strong cybersecurity fundamentals, with hands-on experience in log analysis and incident response. A CS cert or degree is preferred, with the ability to work in a fast-paced, global team.

Qualifications

• 5+ years in a SOC as a Security Operations Analyst.
• Proficiency with reading and analyzing log telemetry from SIEM and various sources.
• Knowledge of MITRE ATT&CK framework is preferred.

Responsibilities

• Demonstrate foundational cybersecurity concepts, including threat vectors and incident response.
• Monitor and triage alerts using SIEM and SOC tools; read logs to identify suspicious activity.
• Conduct initial investigations of security events and escalate as needed.
• Analyze logs from diverse security devices to identify trends and threats.
• Escalate validated incidents to Tier 2 per SOPs and playbooks.
• Document investigation findings with detailed case notes for knowledge sharing.
• Support 24x7 SOC operations and contribute to threat-detection improvements.

Skills

SOC experience

Cybersecurity fundamentals

Log analysis

Team collaboration

Education

Cybersecurity degree or equivalent certification (GCIH/GCFA/Sec+/IAM/IAT)

Tools

KAPE

FTK

Velociraptor

Wireshark

NetworkMiner

Volatility3

REMnux

Ghidra

Any.run

Job description

Why N-able

At N-able, we’re not just helping businesses be secure —we’re redefining what it means to be cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks, so customers can manage, secure, and recover with confidence. But the real power behind it all? Our people. We’re a global crew of N-ablites, who love solving complex problems, sharing knowledge, and delivering solutions that actually make a difference. If you're into meaningful work, fast growth, and a team that’s got your back, you’ll be surrounded by people who believe in what they do—and in you.

Why N-able

At N-able, we’re not just helping businesses be secure —we’re redefining what it means to be cyber resilient. Our end-to-end platform blends AI-powered capabilities and flexible tech stacks, so customers can manage, secure, and recover with confidence. But the real power behind it all? Our people. We’re a global crew of N-ablites, who love solving complex problems, sharing knowledge, and delivering solutions that actually make a difference. If you're into meaningful work, fast growth, and a team that’s got your back, you’ll be surrounded by people who believe in what they do—and in you.

What You’ll Do

• Demonstrate foundational knowledge of cybersecurity concepts, including threat vectors, risk management, and incident response.
• Monitor and triage alerts using Adlumin SIEM and other SOC tools, with the ability to read, and analyze logs such as Network logs, Identity and Access Management (IAM), Endpoint logs, Cloud activity, etc to identify suspicious behavior.
• Conduct initial investigations of security events to assess impact and determine if escalation is needed.
• Analyze logs from diverse security devices to identify trends, anomalies, and potential threats.
• Escalate validated incidents to Tier 2 for further analysis, following established SOPs and playbooks.
• Accurately document investigation findings and ensure detailed case notes for knowledge sharing and reporting.
• Collaborate with team members to support a 24x7 SOC operation and contribute to continuous threat detection improvements.

What You’ll Bring

• 5+ years of experience as a Security Operations Analyst in a SOC environment with strong cybersecurity fundamentals.
• Proficiency in analyzing/reading log telemetry using SIEM platforms, with experience across a wide range of sources including Windows and Linux systems, network infrastructure, email, EDR solutions, cloud environments, DNS, VPN, threat detection technique, and more.
• Knowledge of living-off-the-land techniques, encoding/decoding commands, and MITRE ATT&CK framework.
• Cybersecurity-related degree or equivalent certification (e.g., SANS certificiations GCIH, GCFA, CompTIA Sec+ or DoD 8570/8140 IAM/IAT Level 2), with the ability to commute or relocate as required.
• Familiar tools:

• host forensics: kape, FTK, velociraptor etc
• network forensics: wireshark, networkminer, etc
• memory forensics, volatility3, memprocfs
• malware analysis: ghidra, REMnux, any.run

Purple Perks

• Medical and dental insurance
• Generous PTO and observed holidays
• 2 Paid VoluNteer Days per year
• Employee Stock Purchase Program
• Pension with company-contribution
• Monthly grab & go onsite pantry allowance
• Monthly internet allowance
• De Minimis - monthly allowance
• FuN-raising opportunities as part of our giving program
• N-ablite Learning – custom learning experience as part of our investment in you

About N-able

At N-able, our mission is to protect businesses against evolving cyberthreats with an end-to-end cyber resilience platform to manage, secure, and recover. Our scalable technology infrastructure includes AI-powered capabilities, market-leading third-party integrations, and the flexibility to employ technologies of choice—to transform workflows and deliver critical security outcomes. Our partner-first approach combines our products with experts, training, and peer-led events that empower our customers to be secure, resilient, and successful.