Senior SOC Analyst & Incident Response Lead

PENBROTHERS; Philippines; On-site; PHP 600,000 - 1,100,000; Full time

Benefits offered by this job

Meaningful work & Growth

Employee as our biggest asset

Global reach & local impact

Powering global startups

Job summary

Penbrothers in the Philippines is seeking a SOC Analyst, Consultant to create and maintain the safest operating environment for the client, employees and clients. You will defend network boundaries, harden systems, and monitor our systems for attacks, working to proactively identify flaws and vulnerabilities.

Join a remote talent management partner enabling global startups from home, contributing to incident response, threat intel use, and ongoing improvements to security posture.

Qualifications

• Bachelor degree in information technology, Computer Science, Cybersecurity, or a related discipline, or equivalent professional experience.
• Expertise in investigating and mitigating security incidents across diverse environments, including on-premises, cloud, and hybrid infrastructures.
• An experienced (Level 2 or 3) Analyst, looking to develop and grow a SOC service and team.
• Strong understanding of threat intelligence integration, adversary TTPs, and the MITRE ATT&CK framework.
• Desired Certifications: CompTIA Security+ and Cybersecurity Analyst (CySA+), ISC2 CC and SSCP, EC-Council EIH, GIAC CHI, and SIEM/EDR certifications are a plus.
• Advanced English (C1).
• 3–5 years of hands‑on experience in SOC operations, preferably for a SOC or MDR service provider (e.g., MSSP).
• Proficiency with SOC technologies, including SIEM (Chronicle, Splunk, IBM QRadar), EDR/XDR (Trellix, CrowdStrike, SentinelOne, BlackPoint), and SOAR platforms (Chronicle, FortiSOAR, Splunk SOAR).
• Experience responding to alerts related to Microsoft Office 365, Identities (Entra ID, Active Directory), Cloud (AWS, Azure), Firewalls, Endpoint security, Email security, Web security (IP, DNS Filtering).

Responsibilities

• Lead the analysis of escalated incidents, assess attack scope, identify affected systems, and develop containment, eradication, and recovery plans.
• Leverage threat intelligence feeds and IoC databases to enhance incident response and analyze adversary TTPs to improve detection and prevention.
• Act as the escalation point for confirmed incidents, collaborating with internal teams and interfacing with external stakeholders for effective resolution.
• Use and maintain expertise in SIEM, EDR/XDR, and SOAR platforms for advanced threat detection, while optimizing tools and tuning detection rules.
• Document the entire incident lifecycle, including root cause analysis and actions taken, and produce detailed reports with recommendations for security improvements.
• Take ownership of complex incidents, ensuring timely resolution and effective communication with stakeholders.
• Work closely with IT, security, and SOC engineering teams to ensure coordinated and efficient responses to incidents.
• Review and refine response processes and detection mechanisms, contributing to continuous improvement and strengthening the organization's security posture.
• Support the growth and development of a Managed SOC/MDR service and team (e.g., create Standard Operating Procedures, system/platform configuration and tuning, team training).
• Participate in after-hours/on-call shifts for SOC alert escalation and response requirements.

Skills

SOC operations

Threat intelligence

Incident escalation

English (Advanced)

Team leadership

3–5 years SOC

MITRE ATT&CK

Security certifications

Cloud/Hybrid security

SOAR/EDR/XDR

Education

Bachelor degree in IT / CS / Cybersecurity

Tools

Chronicle

Splunk

IBM QRadar

Trellix/CrowdStrike/SentinelOne

FortiSOAR/Splunk SOAR

Job description

Penbrothers in the Philippines is seeking a SOC Analyst, Consultant to create and maintain the safest operating environment for the client, employees and clients. You will defend network boundaries, harden systems, and monitor our systems for attacks, working to proactively identify flaws and vulnerabilities.

Join a remote talent management partner enabling global startups from home, contributing to incident response, threat intel use, and ongoing improvements to security posture.