Senior SOC Analyst — Splunk & Incident Response

DXC Technology; Manila; Hybrid; PHP 900,000 - 1,300,000; Full time

Benefits offered by this job

Health Insurance (HMO)

Life Insurance

Vacation & Sick Leave

Maternity Leave

Paternity Leave

De-minimis Allowance

Training & Certification

Flexible Work

Supportive Work Environment

Performance Bonus

Standby Pay

COVID-19 Support

Retirement Plan

Employee Assistance Program

Job summary

DXC Technology Philippines is seeking an experienced Senior SOC Analyst to monitor, investigate, and respond to security incidents across client environments. You will use Splunk ES and SPL to hunt threats, validate detections, and tune alerts while coordinating with cross-functional teams.

The role emphasizes structured incident response, clear communication, and producing executive-ready reports. A strong background in NIST-aligned practices and mentoring junior analysts is desirable in this

Qualifications

• 5+ years of experience in cybersecurity/SOC operations, with Tier 2.5 or Tier 3-level capabilities.
• Strong hands-on experience with Splunk Enterprise Security.
• Strong Splunk SPL skills, including building, modifying, interpreting, and troubleshooting queries.
• Hands-on experience with cybersecurity incident response and investigation.
• Knowledge of NIST-aligned incident response practices.
• Experience investigating security events across endpoint, network, identity, cloud, email, application, and SIEM telemetry.
• Strong written and verbal communication skills, including customer-facing.
• Experience preparing technical incident reports, RCA/PIR documentation, and executive summaries.

Responsibilities

• Perform advanced SOC monitoring, triage, and investigation of complex security alerts and incidents across customer environments.
• Utilize Splunk Enterprise Security and SPL for security investigations, threat hunting, detection validation, correlation searches, and detection tuning.
• Execute structured incident response activities, including analysis, escalation, containment coordination, recovery validation, RCA, and post-incident reviews.
• Communicate security findings, risks, recommendations, and incident status to technical teams, customers, and business stakeholders.
• Prepare accurate, evidence-based incident reports, executive summaries, case documentation, and improvement recommendations.
• Identify detection gaps, false positives, alert noise, and recurring security patterns; recommend improvements to SOC processes and detection logic.
• Contribute to threat hunting, SOC playbooks, knowledge articles, and mentoring of junior analysts.

Skills

Splunk Enterprise Security

Splunk SPL

Incident response

NIST incident response

SOC monitoring & triage

MITRE ATT&CK & threat intel

Customer-facing communication

Tools

Splunk dashboards

Splunk CIM

Correlation searches

SIEM tuning

Job description

DXC Technology Philippines is seeking an experienced Senior SOC Analyst to monitor, investigate, and respond to security incidents across client environments. You will use Splunk ES and SPL to hunt threats, validate detections, and tune alerts while coordinating with cross-functional teams.

The role emphasizes structured incident response, clear communication, and producing executive-ready reports. A strong background in NIST-aligned practices and mentoring junior analysts is desirable in this