SOC Analyst

Rfa-Engineering; Philippines; Remote; PHP 450,000 - 650,000; Full time

Job summary

Rfa-Engineering in the Philippines is seeking a SOC Analyst to monitor and analyze security data for clients from the RFA Security Operations Center, detecting malicious activity and recommending actions.

You’ll work 9:30 AM–6:30 PM PHT, Mon–Fri, in a 24x7 SOC environment, using SIEM/EDR tools, documenting incidents, escalating when needed, and collaborating with the team to improve processes.

Qualifications

• Bachelor's degree or equivalent experience.
• 2+ years' experience as a Security/Network Administrator or equivalent.
• Knowledge of security methodologies, processes, and technical security solutions.
• Strong communication skills and ability to work independently.
• Knowledge of TCP/IP, network analysis, and Internet protocols.
• Security+ or InfoSec certification preferred.

Responsibilities

• Operate in a 24x7 SOC environment.
• Monitor, correlate, analyze, and escalate security data from SIEM and EDR solutions.
• Investigate, contain, and eradicate malicious activity following established procedures.
• Document incidents and provide status updates throughout the lifecycle.
• Collaborate with analysts and support process improvement.
• Assist with network mapping and vulnerability scanning as required.
• Respond to client security inquiries.

Skills

SOC operations

SIEM

EDR

TCP/IP

Network analysis

Communication

Independence

Education

Bachelor's degree

Tools

Firewall

IDS/IPS

Ticketing systems

Job description

Certification requirements = Microsoft Certified: Security Operations Analyst Associate SC200

Working shift - 9:30AM - 6:30PM PHT - Mon-Fri

As a member of the RFA Security Operations Center, a SOC Analyst monitors and analyzes the output from various security monitoring and scanning tools to detect malicious or anomalous activity on behalf of RFA clients. The SOC Analyst recommends actions per established procedures for the detection, containment, and remediation of cyber security incidents. The analyst also supports the engineering, installation, configuration, and maintenance of the RFA MDRinfrastructure, as required.

Responsibilities

• Responsible for working in a 24x7 Security Operation Center (SOC) environment.
• Monitor, prioritize, correlate, analyze, and elevate security data from multiple sources including, but not limited to SIEM and endpoint EDR solutions.
• Independently follow established procedures to investigate, escalation, contain, and/or eradicate malicious activity.
• Document all activities during incident identification and provide leadership with status updates during the life cycle of an incident. Log and record all security events to internal ticketing system.
• Communicate and collaborate with the analyst team for situational awareness.
• Support network mapping and vulnerability scanning as required.
• Build and develop professional working relationships with fellow analysts.
• Assist and communicate to foster collaboration and support a team approach to operations.
• Support process improvement.
• Respond to client security related inquiries.

Qualifications

• Bachelor's degree or equivalent level of experience.
• 2+ years' experience as a Security/Network Administrator or equivalent knowledge.
• Knowledge of various security methodologies and processes, and technical security solutions (firewall and intrusion detection systems).
• Strong communication skills.
• Able to work independently.
• Knowledge of TCP/IP Protocols, network analysis, and network/security applications.
• Knowledge of common Internet protocols and applications.
• Security+ or InfoSec security certification preferred.