SOC Analyst

Continent 8 Technologies; Makati; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Continent 8 Technologies in Manila is seeking a SOC Analyst to join our Security Operations team. The role focuses on incident response, threat investigations, and reducing risk for customers across enterprise environments.

You will work with our SOC team to monitor events, analyze logs, and develop remediation workflows while contributing to security architecture and procedures across on-prem and cloud deployments.

Qualifications

• 3.5+ years in a Security Operations role with investigations and incident response.
• Experience working within a Security Operations Centre.
• Knowledge in using and configuring the Elastic stack to drive SOC operations.
• Certifications such as Security+, Pentest+, CEH/EC-Council or CISSP are desired.
• Understanding threats, vulnerabilities, exploits, and security policies.
• Experience analyzing event logs and performing forensic analysis.
• Experience with security technologies (SIEM, AV, EDR, IDS/IPS, WAF/DAM, DLP).
• Knowledge of firewalls, AD/AAD, RADIUS and network security basics.
• Unix/Linux/Windows admin, patching, and security controls.
• Cloud environments (Azure, AWS) and virtualization (VMware).
• Scripting skills (Python, Perl, Bash, PowerShell).

Responsibilities

• Incident response activities, security incident investigations, and remediation planning.
• Investigating and reporting on external information security threats and trends.
• Overseeing vulnerability and risk analysis for customer IT systems and cloud infra.
• Building automated alerting and remediation workflows for security issues.
• Developing operating procedures to integrate into daily workflows for secure apps and infra.
• Consulting on design and engineering processes to embed security by default.
• Recommending information assurance solutions to support product development.
• Driving ongoing improvement of security processes and procedures.

Skills

SOC operations

Incident response

Elastic Stack

Threat investigation

Log analysis

Vulnerability management

Scripting (Python/PowerShell/Bash)

Cloud & virtualization

Security tech stack (SIEM/EDR/IDs)

Networking basics (HTTP/DNS/TCP/UDP)

Tools

Elastic Stack

Tenable

VMware

Azure

AWS

Job description

As part of our continued cybersecurity expertise expansion, we are on the lookout for a SOC Analyst, to join our Security Operations team located in Manila. This role will join, support, and help drive the current SOC team, based in Europe, Canada and India all under the direction of the Chief Security Officer.

The successful individual will take a key role in the development of our security capabilities including internal procedures, developments of our security toolsets used in capturing, analyzing, and responding to security threats and the continued growth and development of our SOC team. The primary objective will be to reduce operating risk for customers and improve our responses to security threats.

The Role

As a SOC Analyst, You Will Be Responsible For

• Incident response activities, security incident investigations, and working with asset owners, stakeholders, other teams, and relevant teams to develop remediation plans.
• Investigating, documenting, and reporting on external information security threats and emerging trends.
• Overseeing vulnerability and risk analysis for customer IT systems, enterprise applications and cloud infrastructure.
• Building automated alerting and remediation workflows for security issues.
• Development of operating procedures for teams to integrate into their daily workflows to deliver secure enterprise applications and & infrastructure at scale.
• Consulting on technical design & engineering processes for system architectures to ensure that security is a design consideration and not a feature.
• Recommending information assurance and security solutions to support product development and customer requirements.
• Driving the ongoing improvement of security processes and procedures.

Knowledge, Skills, Qualifications & Experience Required

• 3.5 + years in a Security Operations role with comprehensive experience in investigations and incident response.
• Experience working within a Security Operations Centre.
• Knowledge in using and configuring the Elastic stack (Elastic Search, Logstash, Kibana) to drive SOC operations (or equivalent SOC tech stack)
• One or more of the following certifications are highly desired: CompTIA Security+, PentTest+, EC-Council (CEH, ECIH, CHFI, CND), Cisco CyberOps, GIAC (GCED, GCIA, GCIH), ISC2 (CISSP, CSSP) or similar security certifications.
• Detailed understanding of threats, vulnerabilities, exploits, defences, security principles and policies.
• Knowledge of techniques attackers use to identify vulnerabilities, gain unauthorised access, escalation privileges and access restricted information.
• Experience analyzing event and system logs, performing packet and forensic analysis in support of intrusion analysis or enterprise-level information security operations.
• Knowledge of security practices and essential security technologies (AV, EDR, FIM, HIPS, NIPS, SIEM, WAF/DAM, DLP, IDS/IPS).
• Knowledge of information security protection/detection and authentication systems (firewalls, IDS, IPS, anti-virus, AD, AAD, RADIUS etc.).
• Knowledge of Unix, Linux and Windows administration, patch deployment and system configuration and security controls.
• Knowledge of communication protocols (HTTP, DNS, TCP/UDP) as well as the various techniques utilized by malware within an operating system for persistence and data collection.
• Practical experience with scripting languages (e.g., Python, Perl, Bash, PowerShell).
• Understanding of database systems, application system development and installation/implementation processes.
• Practical experience performing vulnerability scans, risk assessments and security assessments.
• Practical experience in the use of Tenable vulnerability assessment tool is highly desirable.
• Understanding of virtualization technologies (e.g. VMware) and cloud environments (e.g. Azure, AWS)
• Strong foundation in security domains such as web security, cloud services security, identity/access management, web application firewalls, intrusion detection, and static/dynamic application security testing.
• Experience in designing, implementing, and managing solutions to complex security and infrastructure environments.

Attributes

• Able to effectively communicate complex technical concepts such as security vulnerabilities to people who may have little to no experience with security.
• Must have the ability to work independently at a very large scale, enterprise setting and collaborate with multiple team members.
• Detail-oriented and well-organized.
• Proactive and able to multitask effectively.
• Approachable with strong interpersonal skills.
• Adaptable and willing to learn in a rapidly changing environment.

Our Company

Continent 8 has powered a second digital revolution – a revolution defined by intense, instantaneous, and omnipresent computing power. We have built and secured the world’s most reliable and secure edge network. Our global footprint spans every inhabited continent, and our edge network is local to over 92% of the world’s population. We regularly fend off some of the most sophisticated attacks in the world and our security solutions are known to provide unmatched protection. We have developed specialized expertise in regulatory environments. We help protect against cyber and political risk, ensuring that our world class network delivers high availability and throughput. Our secure edge network is globally distributed and serves the world’s most demanding industries. The gaming and financial trading industries depend on us to process billions of dollars’ worth of transactions each day. The transportation and autonomous vehicle industries depend on us to move the world’s population. The energy and utility industries depend on us to power critical infrastructure. Organizations choose Continent 8 when they simply can’t afford to lose connectivity. We are the Edge Infrastructure-as-a-Service provider of choice for the world’s most demanding customers.