Soc Analyst L1

Dynamicminds Business Solutions, Inc; Parañaque; Remote; PHP 279,000 - 670,000; Full time

Job summary

Dynamicminds Business Solutions, Inc. is seeking a SOC Analyst (Level 1) to monitor security alerts around the clock and perform first-level triage. You will work with senior analysts to apply playbooks and ensure threats are detected and escalated promptly.

This entry point offers hands-on exposure to real-world detection and response. You will use Windows Event and Linux logs, map activity to MITRE ATT&CK, and contribute to continuous improvement of detection rules while maintaining thorough

Qualifications

• Networking fundamentals: TCP/IP, DNS, ports & protocols.
• Log analysis: read and interpret Windows Event and Linux logs.
• SIEM monitoring: familiarity with Splunk, Microsoft Sentinel or QRadar.
• Threat awareness: phishing, malware and brute-force attack recognition.
• Triage & escalation: follow playbooks and produce clear handovers.
• MITRE ATT&CK: familiarity with the framework and its threat mappings.

Responsibilities

• Monitor SIEM dashboards and security alerts across the environment.
• Perform first-level triage of alerts - validate, prioritise, and classify events.
• Investigate suspicious activity using Windows Event and Linux logs; correlate data.
• Escalate to Tier 2 analysts and incident responders with handover notes.
• Recognise common attack patterns and respond per procedures.
• Map observed activity to MITRE ATT&CK for consistent reporting.
• Document alerts and investigations to maintain audit trail and improve rules.
• Contribute to shift handovers and ongoing monitoring of the SOC.

Skills

Networking fundamentals

Log analysis

SIEM monitoring

Threat awareness

Triage & escalation

MITRE ATT&CK

Job description

Employee Recognition and Rewards

Incentives

Government Mandated Benefits

Insurance Health & Wellness

Health Insurance

Work-Life Balance

Work from Home

The SOC Analyst (Level 1) is the front line of our Security Operations Center. In this role you will monitor security alerts around the clock, triage potential threats, and elevate confirmed incidents with speed and precision. You will work alongside senior analysts and incident responders, applying established playbooks to separate genuine threats from noise and ensuring that nothing slips through the cracks. It is an ideal entry point for someone building a career in cybersecurity who wants hands-on exposure to real-world detection and response.

Key Responsibilities

• Monitor SIEM dashboards and security alerts across the environment, identifying anomalies and potential indicators of compromise.
• Perform first-level triage of alerts - validating, prioritising, and classifying events to distinguish true threats from false positives.
• Investigate suspicious activity using Windows Event and Linux logs, correlating data across sources to establish scope and impact.
• Escalate confirmed or high-priority incidents to Tier 2 analysts and incident responders following established playbooks, with clear and complete handover notes.
• Recognise common attack patterns - phishing, malware, and brute-force attempts - and respond according to standard operating procedures.
• Map observed activity to the MITRE ATT&CK framework to support consistent threat classification and reporting.
• Document all alerts, investigations, and actionstaken to maintain an accurate audit trail and support continuous improvement ofdetection rules.
• Contribute to shift handovers and ongoing monitoring coverage of the Security Operations Center.

What You Bring

• Networking fundamentals - a solid grasp of TCP/IP, DNS, and common ports & protocols.
• Log analysis - the ability to read and interpret Windows Event and Linux logs.
• SIEM monitoring - familiarity with one or more platforms such as Splunk, Microsoft Sentinel, or QRadar.
• Threat awareness - working knowledge of phishing, malware, and brute-force attack
• Triage & escalation - comfort following playbooks and producing clear, complete handovers.
• MITRE ATT&CK - familiarity with the framework and how it is applied to threat

classification.

Certifications

Security+, Network+, or CySA+ certifications are a strong plus but are not required. We welcome candidates who are actively working toward these credentials.