Senior SOC Analyst: Threat Detection & IR

N-able; Taguig; On-site; PHP 800,000 - 1,000,000; Full time

Benefits offered by this job

Medical and dental insurance

Generous PTO and holidays

Employee Stock Purchase Program

Pension with company-contribution

Internet allowance

Job summary

N-able is seeking a Security Operations Analyst to join its SOC team in the Philippines. You will monitor, investigate, and triage security events, leveraging SIEM and diverse data sources to identify threats and escalate where needed.

The role requires 5+ years in a SOC and strong cybersecurity fundamentals, with hands-on experience in log analysis and incident response. A CS cert or degree is preferred, with the ability to work in a fast-paced, global team.

Qualifications

• 5+ years in a SOC as a Security Operations Analyst.
• Proficiency with reading and analyzing log telemetry from SIEM and various sources.
• Knowledge of MITRE ATT&CK framework is preferred.

Responsibilities

• Demonstrate foundational cybersecurity concepts, including threat vectors and incident response.
• Monitor and triage alerts using SIEM and SOC tools; read logs to identify suspicious activity.
• Conduct initial investigations of security events and escalate as needed.
• Analyze logs from diverse security devices to identify trends and threats.
• Escalate validated incidents to Tier 2 per SOPs and playbooks.
• Document investigation findings with detailed case notes for knowledge sharing.
• Support 24x7 SOC operations and contribute to threat-detection improvements.

Skills

SOC experience

Cybersecurity fundamentals

Log analysis

Team collaboration

Education

Cybersecurity degree or equivalent certification (GCIH/GCFA/Sec+/IAM/IAT)

Tools

KAPE

FTK

Velociraptor

Wireshark

NetworkMiner

Volatility3

REMnux

Ghidra

Any.run

Job description

N-able is seeking a Security Operations Analyst to join its SOC team in the Philippines. You will monitor, investigate, and triage security events, leveraging SIEM and diverse data sources to identify threats and escalate where needed.

The role requires 5+ years in a SOC and strong cybersecurity fundamentals, with hands-on experience in log analysis and incident response. A CS cert or degree is preferred, with the ability to work in a fast-paced, global team.