Senior SOC Analyst: Incident Response & Threat Hunting

Netrust Philippines Corporation; Makati; In loco; PHP 800.000 - 1.200.000; Tempo pieno

Descrizione del lavoro

Netrust Philippines Corporation in Makati, Philippines is seeking a SOC Analyst Level 2 to perform advanced incident investigation, threat hunting, and incident response coordination. The role focuses on validating complex cases, determining root cause, coordinating containment, and improving SOC detection capabilities.

The ideal candidate has hands-on incident investigation experience, strong SIEM/EDR skills, and a solid understanding of networking, Windows, Linux, Active Directory, and cloud

Competenze

• Bachelor's degree in IT, Computer Science, Cybersecurity, or related field, or equivalent experience.
• 3–5+ years of cybersecurity, SOC, incident response, security engineering, or threat hunting experience.
• Hands-on experience investigating security incidents.
• Experience with SIEM and EDR/XDR platforms.
• Strong understanding of networking, Windows, Linux, Active Directory, cloud, and identity security.
• Experience in a Managed SOC or MSSP environment is highly desirable.

Mansioni

• Advanced Incident Investigation: deep-dive analysis of escalated security incidents.
• Incident Response & Coordination: lead technical investigation and containment actions.
• Threat Hunting: proactive log reviews and hypothesis testing.
• Detection Engineering: tune rules, reduce false positives, expand detection coverage.
• Malware and IOC Analysis: analyze hashes, URLs, domains, and attacker TTPs.
• L1 Mentoring & QA: guide L1 analysts and improve playbooks and procedures.

Conoscenze

Incident investigation

Threat hunting

Detection engineering

Mentoring

Incident response coordination

Network security basics

Formazione

Bachelor's degree in IT/CS/Cybersecurity or related field

Strumenti

SIEM

EDR/XDR

Descrizione del lavoro

Netrust Philippines Corporation in Makati, Philippines is seeking a SOC Analyst Level 2 to perform advanced incident investigation, threat hunting, and incident response coordination. The role focuses on validating complex cases, determining root cause, coordinating containment, and improving SOC detection capabilities.

The ideal candidate has hands-on incident investigation experience, strong SIEM/EDR skills, and a solid understanding of networking, Windows, Linux, Active Directory, and cloud