SOC Analyst | Hybrid - Mid and Night Shift

Apex Fintech Solutions; Taguig; Hybrid; PHP 600,000 - 900,000; Full time

Benefits offered by this job

Night differential

Job summary

Apex Fintech Solutions LLC is seeking a Security Operations Center (SOC) Analyst to monitor, triage, and investigate real-time alerts using SIEM, UEBA, EDR, DLP, and cloud security tools. You will provide Tier 1/2 support, perform incident response, and coordinate handovers across shifts in a hybrid office setup in BGC, Manila.

The role requires a Bachelor's degree in a related field, 2+ years in security operations, and familiarity with MITRE ATT&CK, Cyber Kill Chain, and D3FEND.

Qualifications

• Bachelor's degree or higher in Security, Forensics, Cyber Security, or Computer Science
• At least two years in security operations or related information security role (Tier 1/2)
• Knowledge of Cyber Kill Chain, MITRE ATT&CK, D3FEND
• Knowledge of security solutions (firewalls, SIEM, EDR, DLP, SOAR)
• Familiarity with TCP/IP, DNS, HTTP, SSL/TLS, and network analysis
• Willingness to work rotating shifts including nights/weekends/public holidays
• Clear written and visual communication for varying audiences
• Ability to manage multiple investigations by risk and priority

Responsibilities

• Monitor, triage, investigate security alerts in real time using SIEM, UEBA, EDR, DLP, and cloud tools
• Correlate events from multiple sources across the enterprise
• Provide Tier 1/2 support and assist in remediation of incidents
• Provide Incident Response support when an actionable incident is confirmed
• Complete clear handovers at shift end to avoid delays
• Support threat hunting and analyze emerging threats with the Threat and Vulnerability Management team
• Analyze trends in security log data across devices and layers
• Suggest alert and playbook enhancements for better detection
• Generate reports, dashboards, and metrics from security technologies
• Communicate updates to internal stakeholders including senior management

Skills

Communication

Analytical thinking

Multi-tasking

Shift flexibility

Incident response

Education

Bachelor's degree in Security/CompSci or related

Tools

SIEM

EDR

DLP

NIDS/NIPS/HIDS/HIPS

SOAR

Cloud security

Job description

About the role

The Security Operations Center (SOC) Analyst role involves monitoring, triaging, and investigating security alerts and events in real time using SIEM, UEBA, EDR, DLP, network monitoring, email security, vulnerability, cloud, and threat intelligence tools. You will correlate and analyze events from various sources across the enterprise, provide Tier 1 and Tier 2 support, and. This position includes shift work covering 24 hours a day, seven days a week, with a primary shift of 3pm - 11pm (1HC) and 10PM - 6AM (1HC) Manila Time, and requires availability for on-call support outside scheduled shifts when needed.

Key responsibilities

• Monitor, triage, and investigate security alerts and events in real time using SIEM, UEBA, EDR, DLP, network monitoring, email security, vulnerability, cloud, and threat intelligence tools
• Correlate and analyze events using information gathered from a variety of sources across the enterprise
• Provide Tier 1 and Tier 2 support, escalating and assisting in the remediation of critical security incidents
• Provide Incident Response (IR) support when analysis confirms an actionable incident
• Complete clear, documented handovers at the end of each shift so open alerts and incidents continue without delay
• Support threat hunting and analyze emerging threats and newly disclosed vulnerabilities, working with the Threat and Vulnerability Management team
• Analyze trends in security log data from many different security devices across multiple layers
• Respond to custom security detections, signatures, and correlations, suggest alert and playbook enhancements that improve detection capability
• Generate reports, dashboards, and metrics from security technologies
• Communicate with internal stakeholders, including senior management, to provide updates on security incidents and confirm resolution

About you

• Bachelor's degree in a related field (Security, Forensics, Cyber Security, or Computer Science preferred) or equivalent industry experience
• At least two years of experience in a security operations or related information security role, ideally at Tier 1 or Tier 2 level
• Knowledge of security methodologies and frameworks, such as the Cyber Kill Chain, the Diamond Model, and MITRE ATT&CK and D3FEND
• Knowledge of technical security solutions, including firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavior analytics, orchestration, automation, and cloud security
• Strong knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS, and HTTP protocols, network analysis, network and security applications, and email security
• Good knowledge of common malware threats and attack methods
• Basic knowledge of scripting and programming languages, such as PowerShell, Python, Bash, .NET, Ruby, Java, or C
• Willingness and ability to work rotating shifts, including nights, weekends, and public holidays
• Communicate clearly in written and visual documents for different audiences, including at handover between shifts
• Manage multiple tasks and investigations at the same time, and prioritize by risk

Shift Work and Working Conditions

• Headcount: 2 head counts
• Shift: 3pm - 11pm and 10am - 6am Manila Shift
• Work a shift pattern that covers the SOC 24 hours a day, seven days a week
• Shifts include evenings and overnight hours
• Be available for call-out or on-call support outside scheduled shifts when required
• Work will be hybrid- 2x in office setup in BGC
• Night differential are provided in line with company policy and Philippine labor regulations

About us

The Information Security team is made up of independent thinkers and doers who positively affect our clients and shape the business and security posture of Apex Fintech Solutions. The team builds and maintains a collaborative environment and engaging work, guided by Open and Honest Communication, Teamwork and Collaboration, Involving Everyone, Leaders Who Serve, and Personal Accountability.