SOC Analyst

LizardBear Tasking, Inc. (PEZA); Las Piñas; On-site; PHP 400,000 - 660,000; Full time

Benefits offered by this job

Competitive salaries

Comprehensive benefits packages

Job summary

TaskUs is seeking a SOC Analyst to monitor and investigate security events across endpoints, networks, and cloud platforms. The role involves triage, incident handling, and detailed investigations to enhance detection capabilities.

You will collaborate on developing detection rules, playbooks, and post-event reports, while staying current on threat intelligence and TTPs. On-site in Las Piñas with a shifting schedule, the position emphasizes hands-on security operations experience.

Qualifications

• 1+ year in SOC/IR/cybersecurity role.
• Experience with endpoint, network, and cloud security.
• Knowledge of NIST, MITRE ATT&CK, CIS Controls, and Cyber Kill Chain.
• Hands-on with SIEM platforms listed.

Responsibilities

• Investigate security alerts from client’s security stack and cloud platforms.
• Perform in-depth investigations and threat analysis.
• Correlate events across tools to assess risk and remediation.
• Develop/determine detection rules, playbooks, and response procedures.
• Tune monitoring tools to reduce false positives.
• Prepare post-event reports and executive summaries.

Skills

SIEM analysis

Incident response

Threat detection

Analytical thinking

Cloud security

Education

Bachelor's degree in Cybersecurity

Tools

Microsoft Sentinel

Splunk

QRadar

LogRhythm

Microsoft Defender for Endpoint

CrowdStrike

Job description

About TaskUs

TaskUs is a provider of outsourced digital services and next-generation customer experience to fast-growing technology companies, helping its clients represent, protect and grow their brands. Leveraging a cloud-based infrastructure, TaskUs serves clients in the fastest-growing sectors, including social media, e-commerce, gaming, streaming media, food delivery, ride-sharing, HiTech, FinTech, and HealthTech. The People First culture at TaskUs has enabled the company to expand its workforce to approximately 60,000 employees globally. Presently, we have a presence in twenty-three locations across twelve countries, which include the Philippines, India, and the United States. It started with one ridiculously good idea to create a different breed of Business Processing Outsourcing (BPO)! We at TaskUs understand that achieving growth for our partners requires a culture of constant motion, exploring new technologies, being ready to handle any challenge at a moment’s notice, and mastering consistency in an ever-changing world.

What We Offer

• competitive industry salaries and comprehensive benefits packages.

What can you expect in a Security Operations Center Analyst role with TaskUs:

Our client's Security Operations Center (SOC) currently monitors approximately 65,000 global organizations, 2 million endpoints, and 3 million mailboxes/users from 3 SOC locations. The SOC Analyst 1 serves as an initial triage and alert review point for security events and alerts from our security tools. This role is responsible for conducting in-depth investigations, performing threat analysis, containing attacks, and assisting with improving detection capabilities.

Key Responsibilities

• Investigate security alerts and suspicious activities from our client’s own security stack, 3rd party tools, and cloud platforms.
• Perform detailed investigations into security alerts, attacker techniques, and identify emerging threats.
• Correlate events from multiple security tools and data sources to determine risk, business impact, and required remediation actions.
• Assist with developing and maintaining detection rules, use cases, playbooks, and response procedures.
• Validate security events and reduce false positives through tuning and optimization of monitoring tools.
• Assist with preparing post-event reports, executive summaries, and technical documentation.
• Stay current on threat intelligence, attacker tactics, techniques, and procedures (TTPs), and emerging cybersecurity trends.

Required Qualifications

• At least 1 year of experience in a Security Operations Center, Incident Response, or Cybersecurity Analyst role.
• Experience investigating security events across endpoint, network, and cloud platforms.
• Strong understanding of cybersecurity frameworks such as NIST, MITRE ATT&CK, CIS Controls, and Cyber Kill Chain.
• Hands-on experience with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or LogRhythm.
• Experience with endpoint detection and response (EDR) solutions such as Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, or Carbon Black.
• Knowledge of networking protocols, operating systems, authentication technologies, and cloud security concepts.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication skills (you will be on customer calls).

Preferred Qualifications

• Security certifications such as Security+, CySA+, GCIH, GCIA, GCFA, SC-200, CISSP, or equivalent.
• Experience with Microsoft security technologies including Defender XDR, Sentinel, Entra ID, and Microsoft 365 security solutions.
• Experience with scripting or automation using PowerShell, Python, KQL, or similar languages.
• Knowledge of digital forensics and incident response methodologies.
• Experience supporting cloud environments such as Azure, AWS, or Google Cloud Platform.

Success Measures

• Timely identification and resolution of security incidents.
• Reduction of false-positive alerts through continuous tuning.
• Improvement of detection coverage and threat visibility.
• Contributions to security process improvements, team education, and operational maturity.

Education / Certifications

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field; equivalent experience may be considered.

Work Location / Work Schedule / Travel

Las Pinas office (Hiraya) 100% On-site Work setup Shifting Schedule (subject to change, as needed)

DEI

In TaskUs we believe that innovation and higher performance are brought by people from all walks of life. We welcome applicants of different backgrounds, demographics, and circumstances. Inclusive and equitable practices are our responsibility as a business. TaskUs is committed to providing equal access to opportunities. If you need reasonable accommodations in any part of the hiring process, please let us know.