SOC analyst

DXC Technology; Manila; Hybrid; PHP 900,000 - 1,300,000; Full time

Benefits offered by this job

Health Insurance (HMO)

Life Insurance

Vacation & Sick Leave

Maternity Leave

Paternity Leave

De-minimis Allowance

Training & Certification

Flexible Work

Supportive Work Environment

Performance Bonus

Standby Pay

COVID-19 Support

Retirement Plan

Employee Assistance Program

Job summary

DXC Technology Philippines is seeking an experienced Senior SOC Analyst to monitor, investigate, and respond to security incidents across client environments. You will use Splunk ES and SPL to hunt threats, validate detections, and tune alerts while coordinating with cross-functional teams.

The role emphasizes structured incident response, clear communication, and producing executive-ready reports. A strong background in NIST-aligned practices and mentoring junior analysts is desirable in this

Qualifications

• 5+ years of experience in cybersecurity/SOC operations, with Tier 2.5 or Tier 3-level capabilities.
• Strong hands-on experience with Splunk Enterprise Security.
• Strong Splunk SPL skills, including building, modifying, interpreting, and troubleshooting queries.
• Hands-on experience with cybersecurity incident response and investigation.
• Knowledge of NIST-aligned incident response practices.
• Experience investigating security events across endpoint, network, identity, cloud, email, application, and SIEM telemetry.
• Strong written and verbal communication skills, including customer-facing.
• Experience preparing technical incident reports, RCA/PIR documentation, and executive summaries.

Responsibilities

• Perform advanced SOC monitoring, triage, and investigation of complex security alerts and incidents across customer environments.
• Utilize Splunk Enterprise Security and SPL for security investigations, threat hunting, detection validation, correlation searches, and detection tuning.
• Execute structured incident response activities, including analysis, escalation, containment coordination, recovery validation, RCA, and post-incident reviews.
• Communicate security findings, risks, recommendations, and incident status to technical teams, customers, and business stakeholders.
• Prepare accurate, evidence-based incident reports, executive summaries, case documentation, and improvement recommendations.
• Identify detection gaps, false positives, alert noise, and recurring security patterns; recommend improvements to SOC processes and detection logic.
• Contribute to threat hunting, SOC playbooks, knowledge articles, and mentoring of junior analysts.

Skills

Splunk Enterprise Security

Splunk SPL

Incident response

NIST incident response

SOC monitoring & triage

MITRE ATT&CK & threat intel

Customer-facing communication

Tools

Splunk dashboards

Splunk CIM

Correlation searches

SIEM tuning

Job description

Job Description:

DXC Technology is a Fortune 500 Global IT Services Leader. Our more than 130,000 people in 70-plus countries are entrusted by our customers to deliver what matters most. We use the power of technology to deliver mission critical IT services that transform global businesses. We deliver excellence for our customers, colleagues and communities around the world.

Accelerate your career and reimagine the possibilities with DXC!

We inspire and take care of our people. Work in a culture that encourages innovation and where brilliant people embrace change and seize opportunities to advance their careers and amplify customer success. Leverage technology skills and deep industry knowledge to help clients. Work on transformation programs that modernize operations and drive innovation across our customer’s entire IT estate using the latest technologies incloud,applications,security,IT Outsourcing,business process outsourcingandmodern workplace.

DXC Philippines is an award-winningEmployer of Choiceand a recipient of theGlobal Best Employer BrandandLinkedin’s Top 15 Companies in the Philippines.

Essential Job Functions

• Perform advanced SOC monitoring, triage, and investigation of complex security alerts and incidents across customer environments.
• Utilize Splunk Enterprise Security and SPL for security investigations, threat hunting, detection validation, correlation searches, and detection tuning.
• Execute structured incident response activities, including analysis, escalation, containment coordination, recovery validation, RCA, and post-incident reviews.
• Communicate security findings, risks, recommendations, and incident status to technical teams, customers, and business stakeholders.
• Prepare accurate, evidence-based incident reports, executive summaries, case documentation, and improvement recommendations.
• Identify detection gaps, false positives, alert noise, and recurring security patterns; recommend improvements to SOC processes and detection logic.
• Contribute to threat hunting, SOC playbooks, knowledge articles, and mentoring of junior analysts.

Basic Qualifications

• 5+ years of experience in cybersecurity/SOC operations, with Tier 2.5 or Tier 3-level capabilities.
• Strong hands-on experience with Splunk Enterprise Security.
• Strong Splunk SPL skills, including building, modifying, interpreting, and troubleshooting queries.
• Hands-on experience with cybersecurity incident response and investigation.
• Knowledge of NIST-aligned incident response practices.
• Experience investigating security events using endpoint, network, identity, cloud, email, application, and SIEM telemetry.
• Strong written and verbal communication skills, including customer-facing communication.
• Experience preparing technical incident reports, RCA/PIR documentation, and executive summaries.

Other Qualifications

• Experience with MITRE ATT&CK, threat intelligence, IOC/TTP analysis, threat hunting, SIEM rule tuning, and SOC playbooks.
• Knowledge of Splunk notable events, correlation searches, dashboards, risk-based alerting, security domains, data models, lookups, macros, field extraction, and CIM.
• Experience identifying detection gaps, alert noise, normalization issues, and data-quality problems.
• Ability to coordinate incident response with infrastructure, endpoint, identity, application, and service delivery teams.
• Experience mentoring junior SOC analysts and contributing to SOC process improvements.
• Preferred certifications include Splunk Core Certified Power User, Splunk Enterprise Security Certified Admin, GCIH, GCED, GCFA, CySA+, CISSP, SC-200, or SC-100. Compensation and benefits are the heart of our employment as we venture in offering security and stability to our colleagues.

• Health Insurance (HMO) for you and dependents upon hiring

• Life Insurance coverage from day 1 of employment

• 15 - 20 days vacation and 15 Days Sick Leave

• Expanded maternity leave up to 120 days and Maternity Benefits

• Expanded paternity leave up to 30 days

• Non-Taxable Allowance (De-minimis)

• Company-sponsored trainings upskilling, and certification

• Flexible Working Arrangements

• Healthy and Encouraging Work Environment

• Recognition and Pay for Performance Culture

• Supplemental Pay (Standby/Shift)

• Covid19 Support

• Retirement Program

• Employee Assistance Program

• If you are motivated to deliver excellent result, want to grow your career and make a difference

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.