SOC Analyst II - Threat Detection & Incident Response

Kinettix, Inc.; Cebu City; On-site; PHP 600,000 - 900,000; Full time

Job summary

Kinettix, Inc. seeks a SOC Analyst II to monitor security events and coordinate incident response across the organization’s environment. You will work with Defender XDR, Wazuh, Entra ID, Purview, and Keeper to detect threats and investigate alerts.

In this role, you will lead containment and recovery efforts, mentor SOC Analyst I, and help improve detection rules, processes, and reporting for management and auditors.

Qualifications

• Bachelor's degree in a related field.
• 2–4 years of experience in Security Operations/Incident Response.
• Experience with SIEM/EDR/XDR and security monitoring platforms.

Responsibilities

• Monitor and investigate security alerts from Defender XDR, Wazuh, Entra ID, Purview, Keeper, and others.
• Analyze and respond to security incidents including phishing, malware, and account compromises.
• Perform threat hunting to identify threats and indicators of compromise.
• Lead incident response activities: containment, eradication, and recovery.
• Investigate identity and access events in Entra ID including suspicious sign-ins and privileged access.
• Monitor and respond to DLP alerts via Purview.
• Support vulnerability management by validating findings and coordinating remediation.
• Develop and tune detection rules and incident procedures.
• Document incidents and provide recommendations to management.
• Support security audits and customer requirements using platforms like Vanta.
• Provide mentoring to SOC Analyst I and collaborate with IT, Security, Compliance, and business teams.

Skills

Security Operations

Incident Response

Threat Detection

Threat Hunting

Security Monitoring

Education

Bachelor's Degree in Cybersecurity, IT, CS, or related field

Tools

SIEM

EDR

XDR

Microsoft Defender XDR

Wazuh

Microsoft Entra ID

Microsoft Purview

Keeper

Vanta

Job description

Kinettix, Inc. seeks a SOC Analyst II to monitor security events and coordinate incident response across the organization’s environment. You will work with Defender XDR, Wazuh, Entra ID, Purview, and Keeper to detect threats and investigate alerts.

In this role, you will lead containment and recovery efforts, mentor SOC Analyst I, and help improve detection rules, processes, and reporting for management and auditors.