SOC Analyst (L2 Cybersecurity Operations) - Day Shift

Adventus; Makati; On-site; PHP 420,000 - 660,000; Full time

Job summary

Adventus is seeking a SOC Analyst to join our Managed Security Operations Center, supporting customers across ASEAN. You will monitor security alerts, investigate threats, manage incidents, and coordinate with customers and internal teams to ensure timely resolution.

The role follows a fixed day shift schedule with a 3.5 day work week and one weekend off. Responsibilities include monitoring alerts, incident triage, and collaboration with L3 analysts and the SOC Manager.

Qualifications

• Bachelor’s degree in cybersecurity, IT, CS or related field.
• 1–2 years in SOC operations or IT security.
• Familiarity with SIEM monitoring, incident management, identity security and endpoint protection.

Responsibilities

• Monitor security alerts across multiple platforms and identify threats.
• Triage and investigate alerts; analyze logs; distinguish true vs false positives.
• Assess incident severity; collect IOCs; document findings.
• Manage incidents in ServiceNow and ensure SLA compliance.
• Communicate incident updates and recommendations to customers.
• Escalate complex incidents to L3 analysts and SOC Manager; support containment.
• Maintain incident records, handovers and operational documentation.

Skills

Cybersecurity fundamentals

SIEM monitoring

Incident management

Identity security

Endpoint protection

Email security

Microsoft Defender

PowerShell

KQL

Education

Bachelor's degree in Cybersecurity

Bachelor's degree in Information Technology

Bachelor's degree in Computer Science

Tools

ServiceNow

Microsoft Defender

Job description

Adventus is an Information and Communications Technology (ICT) Solutions and Services Provider with a wide footprint across the globe.

We help organizations bring about positive transformation to their businesses by leveraging intelligent applications of innovative solutions and pertinent services to remain winners in today's ultra-competitive marketplace.

With our strong network of technology partners, excellent domain expertise and differentiated value proposition, we are able to go above and beyond for our customers, far exceeding expectations.

Role Overview

We are seeking SOC Analysts to join our Managed Security Operations Center (SOC), supporting customers across ASEAN. You will monitor security alerts, investigate potential threats, manage incidents, and coordinate with customers and internal technical teams to ensure timely incident resolution. This role follows a fixed day shift schedule 3 and a half day work week, 1 weekend off.

Working Hours

• Full day: 13 hours shift (9am – 10pm)


• Half day: 6.5 hours shift (9am - 3.30pm / 3pm – 9.30pm)

Job Responsibilities

• Monitor security alerts across multiple security platforms and identify potential threats.


• Triage and investigate alerts, analyse security logs, and distinguish true positives from false positives.


• Assess incident severity, gather indicators of compromise (IOCs), and document investigation findings.


• Manage and track security incidents in ServiceNow, ensuring compliance with SLAs.


• Communicate incident updates and recommendations to customers professionally.


• Escalate complex incidents to L3 analysts and the SOC Manager, and support containment and remediation activities.


• Maintain accurate incident records, shift handovers, and operational documentation.

Job Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.


• Understanding of cybersecurity fundamentals, SIEM monitoring, incident management, identity security, endpoint protection, and email security.


• Familiarity with Microsoft security technologies, preferably Microsoft Defender.


• Basic knowledge of security log analysis, KQL, or PowerShell is an advantage.


• 1–2 years of experience in SOC operations, cybersecurity, or IT operations.


• Experience in a Managed Security Services Provider (MSSP) environment is an advantage.


• Relevant certifications such as Microsoft SC-200, SC-900, CompTIA Security+, or ISC2 Certified in Cybersecurity are preferred.


• Strong analytical and problem-solving skills.


• Good written and verbal communication skills.


• Attention to detail and accurate documentation.


• Ability to work independently and remain effective under pressure.


• Willingness to work rotating shifts, if required.