SOC Analyst

DXC Technology Inc.; Philippines; Hybrid; PHP 700,000 - 1,100,000; Full time

Benefits offered by this job

Health Insurance (HMO) for you and dep

Life Insurance

Paid vacation 15-20 days

Sick leave 15 days

Expanded maternity leave

Paternity leave

Training and certification support

Flexible working arrangements

Job summary

DXC Technology Inc. is seeking a Senior SOC Analyst to join our security operations team in the Philippines. You will perform advanced monitoring, triage, and investigation of security alerts across customer environments using Splunk Enterprise Security and SPL.

You will coordinate incident response activities, prepare reports, and communicate risks to technical and business stakeholders. You will mentor junior analysts, contribute to SOC playbooks, and help improve detection logic and processes

Qualifications

• 5+ years of experience in cybersecurity/SOC operations and incident handling.
• Experience with Splunk Enterprise Security and SPL for investigations and detections.
• Strong ability to document incidents, create RCA/PIRs, and executive summaries.
• Familiarity with MITRE ATT&CK, threat intel, and SOC playbooks.

Responsibilities

• Perform advanced SOC monitoring, triage, and investigation of complex security alerts.
• Utilize Splunk Enterprise Security and SPL for investigations, threat hunting, and detection tuning.
• Communicate findings and incident status to technical teams, customers, and stakeholders.
• Prepare incident reports, RCA/PIR, executive summaries, and improvement recommendations.
• Mentor junior analysts and contribute to SOC process improvements.

Skills

Splunk Enterprise Security

Splunk SPL

Incident response

Threat hunting

MITRE ATT&CK

SIEM tuning

Communication skills

Tools

Splunk

Job description

Job Description: DXC Technology is a Fortune 500 Global IT Services Leader. Our more than 130,000 people in 70-plus countries are entrusted by our customers to deliver what matters most. We use the power of technology to deliver mission critical IT services that transform global businesses. We deliver excellence for our customers, colleagues and communities around the world. Accelerate your career and reimagine the possibilities with DXC! We inspire and take care of our people. Work in a culture that encourages innovation and where brilliant people embrace change and seize opportunities to advance their careers and amplify customer success. Leverage technology skills and deep industry knowledge to help clients. Work on transformation programs that modernize operations and drive innovation across our customer’s entire IT estate using the latest technologies in cloud, applications, security, IT Outsourcing, business process outsourcing and modern workplace. DXC Philippines is an award-winning Employer of Choice and a recipient of the Global Best Employer Brand and Linkedin’s Top 15 Companies in the Philippines.

Essential Job Functions

Perform advanced SOC monitoring, triage, and investigation of complex security alerts and incidents across customer environments. Utilize Splunk Enterprise Security and SPL for security investigations, threat hunting, detection validation, correlation searches, and detection tuning. Execute structured incident response activities, including analysis, escalation, containment coordination, recovery validation, RCA, and post-incident reviews. Communicate security findings, risks, recommendations, and incident status to technical teams, customers, and business stakeholders. Prepare accurate, evidence-based incident reports, executive summaries, case documentation, and improvement recommendations. Identify detection gaps, false positives, alert noise, and recurring security patterns; recommend improvements to SOC processes and detection logic. Contribute to threat hunting, SOC playbooks, knowledge articles, and mentoring of junior analysts.

Basic Qualifications

• 5+ years of experience in cybersecurity/SOC operations, with Tier 2.5 or Tier 3-level capabilities.
• Strong hands-on experience with Splunk Enterprise Security.
• Strong Splunk SPL skills, including building, modifying, interpreting, and troubleshooting queries.
• Hands-on experience with cybersecurity incident response and investigation.
• Knowledge of NIST-aligned incident response practices.
• Experience investigating security events using endpoint, network, identity, cloud, email, application, and SIEM telemetry.
• Strong written and verbal communication skills, including customer-facing communication.
• Experience preparing technical incident reports, RCA/PIR documentation, and executive summaries.

Other Qualifications

• Experience with MITRE ATT&CK, threat intelligence, IOC/TTP analysis, threat hunting, SIEM rule tuning, and SOC playbooks.
• Knowledge of Splunk notable events, correlation searches, dashboards, risk-based alerting, security domains, data models, lookups, macros, field extraction, and CIM.
• Experience identifying detection gaps, alert noise, normalization issues, and data-quality problems.
• Ability to coordinate incident response with infrastructure, endpoint, identity, application, and service delivery teams.
• Experience mentoring junior SOC analysts and contributing to SOC process improvements.

Preferred certifications include Splunk Core Certified Power User, Splunk Enterprise Security Certified Admin, GCIH, GCED, GCFA, CySA+, CISSP, SC-200, or SC-100.

Compensation and benefits

• Health Insurance (HMO) for you and dependents upon hiring
• Life Insurance coverage from day 1 of employment
• 15 - 20 days vacation
• 15 Days Sick Leave
• Expanded maternity leave up to 120 days
• Maternity Benefits
• Expanded paternity leave up to 30 days
• Non-Taxable Allowance (De-minimis)
• Company-sponsored trainings upskilling, and certification
• Flexible Working Arrangements
• Healthy and Encouraging Work Environment
• Recognition and Pay for Performance Culture
• Supplemental Pay (Standby/Shift)
• Covid19 Support
• Retirement Program
• Employee Assistance Program

If you are motivated to deliver excellent result, want to grow your career and make a difference come join us! At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

DXC Technology (NYSE: DXC) is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organizations - helping them harness AI to drive outcomes at a time of exponential change with speed. With deep expertise in Managed Infrastructure Services, Application Modernization, and Industry-Specific Software Solutions, DXC modernizes, secures, and operates some of the world's most complex technology estates. Learn more on dxc.com.