SOC Analyst

HRTX; Pasig; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

HRTX in Metro Manila (Pasig) is seeking a SOC Analyst to triage incidents, assess severity, and contain threats 24/7. The role covers incident response, monitoring of alerts/logs, and analysis of suspicious emails.

You will drive containment, execute predefined procedures, participate in forensics and recovery planning, and document incident reports and metrics.

Qualifications

• Bachelor's degree in Computer Science, IT, or related field.
• 3–5 years of experience as a SOC Analyst or Security Engineer.
• Hands-on experience in L2 incident response including containment, isolation, root cause analysis.

Responsibilities

• Perform triage, assess severity of incidents.
• Investigate and contain security incidents.
• Execute predefined response procedures.
• Continuously monitor security alerts, logs, and network traffic.
• Identify potential threats or anomalies.
• Respond to reported suspicious emails and remediation actions.
• Validate reported suspicious activities and other cybersecurity concerns.
• Provide recommendations on analyzed concerns.
• Assist in developing and executing Recovery Plan.
• Participate in investigations or forensics activities.
• Participate in change management processes.
• Assist in troubleshooting hardware and software issues of Collectors and MXDR agents.
• Documentation of Incident Reports, weekly/monthly reporting, maintenance of trackers and other relevant documents.
• Detection Rules review and configuration.
• Threat Intelligence: monitor IOCs, compromised accounts, brand protection and takedown requests.
• Threat Intel publications and advisories.
• Monitor vulnerability advisories and other potential leaks relating to Client.
• Enforce security policies, procedures, and best practices.
• Track and validate security controls, addressing deviations and risks.

Skills

Incident response

Containment

Root cause analysis

Documentation

Communication

Education

Bachelor's degree in Computer Science / IT

Job description

• Perform triage, assess severity of incidents
• Investigate and contain security incidents
• Execute predefined response procedures

b) 24/7 Alerts Monitoring

• Continuously monitor security alerts, logs, and network traffic
• Identify potential threats or anomalies

c) Suspicious Email Analysis and other Security Validations

• Respond to reported suspicious emails
• Analyze suspicious emails, trigger email threat remediation actions
• Perform validations for reported suspicious activities and other cybersecurity concerns
• Provide recommendations on analyzed concerns

d) Documentations and other tasks

• Assist in developing and executive Recovery Plan
• Participate in investigations or forensics activities
• Participate in change management processes
• Assist in troubleshooting hardware and software issues of Collectors and MXDR agents
• Documentation of Incident Reports, weekly/monthly reporting, maintenance of trackersand other relevant documents
• Detection Rules review and configuration

Performance relevant Threat Intelligence team responsibilities such as, but not limitedto:

• Indicators of compromise (IOCs): Collect, analyze, disseminate, and initiate blacklisting
• Compromised accounts: Monitor and validate Client's password leaks
• Brand protection initiatives: hunting of trademark infringements and other violations,impersonations, and sales scams. Perform validations, request for takedown, andmonitoring

Others:

• Threat Intel publications and release of advisories, and other reports
• Monitor releases of new vulnerability advisories, disseminate and track
• Monitor of other potential leaks relating to Client (e.g. code repository, database, etc.)
• Implement and enforce security policies, procedures, and best practices.
• Track and validate security controls, addressing deviations and risks

Qualifications:

• Bachelor Graduate of Computer Science, IT orother related course
• Have at least 3- 5 years of experience as a SOC Analyst or Security Engineer
• Hands-on experience in L2 incident response such as containment, isolation, root cause analysis and deep probing analysis.
  
• Proficient in documentation, strong incident, attack response and containment skills.
• Has experience in cyber threat intelligence is an advantage.