Senior SOC Analyst - EMEA

Continental Industry; Philippines; Hybrid; PHP 900,000 - 1,500,000; Full time

Benefits offered by this job

HMO upon hire

Values-based culture

Learning Opportunities

Job summary

Continental Industry in the Philippines is seeking a Cybersecurity Consultant for Security Operations Center to handle events, alerts, and investigations. You will support threat hunting, threat intelligence, and compliance investigations while collaborating with internal teams to elevate cybersecurity maturity.

Hybrid work setup is offered, with a focus on continuous development of SOC capabilities and coordination with 3rd party teams for EDR, SIEM, and KPI reporting.

Qualifications

• Relevant (best case academic) degree or comparable Cybersecurity certifications (e.g., GCIH, GSOC, GCFE, ...) and 3-5 years of equivalent experience
• Excellent working knowledge of up-to-date cybersecurity tools and structures
• Knowledge of automation and programming would be desirable
• Knowledge of client, server and cloud infrastructure and mutual understanding of applications architecture
• English Language Skills (written and spoken)
• IT service management skills (ITIL) – would be desirable

Responsibilities

• SoC Operation: handle security events and alerts using CrowdStrike MDR and Microsoft XDR/Defender for Office per playbooks
• Investigate endpoint/sensor tampering alerts and coordinate repairs with responsible teams
• Engage in Threat Intelligence and handling activities including Threat hunting
• Support compliance investigations
• SoC Development: contribute to development and implementation of our agentic SOC strategy
• Develop and maintain SOC playbooks
• Oversee 3rd party SoC teams to ensure detection and response for EDR, SIEM, KPI and report analysis
• Collaborate with internal stakeholders to raise cybersecurity maturity across the organization
• Scale cybersecurity to match business needs and protect the environment

Skills

Cybersecurity tools

Automation

Programming

Cloud infrastructure

ITIL

English language

Education

Relevant degree or cyber security certifications

Tools

CrowdStrike MDR

Microsoft XDR/Defender for Office

SIEM

Job description

Company Description

Continental develops pioneering technologies and services for sustainable and connected mobility of people and their goods. Founded in 1871, the technology company offers safe, efficient, intelligent and affordable solutions for vehicles, machines, traffic and transportation. In 2022, Continental generated sales of €39.4 billion and currently employs around 200,000 people in 57 countries and markets.

Company Description

Continental develops pioneering technologies and services for sustainable and connected mobility of people and their goods. Founded in 1871, the technology company offers safe, efficient, intelligent and affordable solutions for vehicles, machines, traffic and transportation. In 2022, Continental generated sales of €39.4 billion and currently employs around 200,000 people in 57 countries and markets.

The ContiTech group sector develops and manufactures, for example, cross-material, environmentally friendly and intelligent products and systems for the automotive industry, railway engineering, mining, agriculture and other key industries. Guided by the vision of "smart and sustainable solutions beyond rubber," the group sector draws on its long-standing knowledge of the industry and materials to open up new business opportunities by combining various materials with electronic components and individual services.

Job Description

The Cybersecurity Consultant Security Operations Center works on a variety of topics within our growing team. If you feel ready to shape the future together with us, please expect involvement in the following exciting topics:

SoC Operation

• Work with a range of security tools such as Crowdstrike MDR and Microsoft XDR / Defender for Office to handle security events and alerts according to playbooks.
• Accountable to investigate end point / sensor tampering alerts and ensure repairs are completed by responsible teams.
• Get involved in Threat Intelligence and -handling activities including Threat hunting.
• Support compliance investigations.

SoC Development

• Supporting the continuous development of SoC capabilities, such as development and implementation of our agentic SOC strategy.
• Development and maintenance of SOC playbooks.
• Oversee and manage the 3rd party teams working in the SoC, to ensure detection and response for topics such as EDR, SIEM, KPI and Report analysis

Collaborate with internal stakeholders to develop decent cybersecurity maturity in our organization.

Scale Cybersecurity according to business needs. Protect our environment. Together.

Qualifications

• Relevant (best case academic) degree or comparable Cybersecurity certifications (e.g., GCIH, GSOC, GCFE, ...) and 3-5 years of equivalent experience,
• Excellent working knowledge of up-to-date cybersecurity tools and structures
• Knowldege of automation and programming would be desirable
• Knowledge of client, server and cloud infrastructure and mutual understanding of applications architecture
• English Language Skills (written and spoken)
• IT service management skills (ITIL) – would be desirable

Experience

• Cybersecurity related environments (focus SoC, Pentesting, Threat Hunting, Incident Response, Forensics) - mandatory
• project management
• global and multicultural company
• Security Monitoring via usage of a SIEM to analyse logs and alerts

Additional Information

• Hybrid work setup
• HMO upon hire
• Values-based culture
• Work-life balance
• Learning Opportunities