SOC Analyst (L2 Cybersecurity Operations) - Day Shift

Adventus; Makati; On-site; PHP 420,000 - 620,000; Full time

Job summary

Adventus is seeking SOC Analysts to join its Managed Security Operations Center, supporting customers across ASEAN. You will monitor security alerts, investigate threats, manage incidents, and coordinate with customers and internal technical teams to ensure timely resolution.

This role follows a fixed day shift schedule with a 3 and a half day work week, including weekends off. Working hours include 13-hour full shifts or 6.5-hour half shifts, with rotating possibilities to cover operational

Qualifications

• Degree in cybersecurity, IT, CS or related field.
• Fundamentals of cybersecurity, SIEM, incident management.
• 1–2 years in SOC/IT operations preferred.

Responsibilities

• Monitor security alerts and identify potential threats.
• Triage, investigate alerts, and document findings.
• Assess incident severity and IOC; coordinate with teams.
• Manage incidents in ServiceNow and meet SLAs.
• Communicate updates to customers and escalate when needed.
• Maintain incident records and shift handovers.

Skills

Threat analysis

Incident response

Analytical thinking

Documentation

Communication

Work under pressure

Education

Bachelor's degree in Cybersecurity, IT, CS

Tools

Microsoft Defender

ServiceNow

PowerShell

KQL

Job description

Role Overview

We are seeking SOC Analysts to join our Managed Security Operations Center (SOC), supporting customers across ASEAN. You will monitor security alerts, investigate potential threats, manage incidents, and coordinate with customers and internal technical teams to ensure timely incident resolution.

This role follows a fixed day shift schedule 3 and a half day work week, 1 weekend off.

Working hours:

Full day: 13 hours shift (9am – 10pm)

Half day: 6.5 hours shift (9am - 3.30pm / 3pm – 9.30pm)

Job Responsibilities

• Monitor security alerts across multiple security platforms and identify potential threats.
• Triage and investigate alerts, analyse security logs, and distinguish true positives from false positives.
• Assess incident severity, gather indicators of compromise (IOCs), and document investigation findings.
• Manage and track security incidents in ServiceNow, ensuring compliance with SLAs.
• Communicate incident updates and recommendations to customers professionally.
• Escalate complex incidents to L3 analysts and the SOC Manager, and support containment and remediation activities.
• Maintain accurate incident records, shift handovers, and operational documentation.

Job Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Understanding of cybersecurity fundamentals, SIEM monitoring, incident management, identity security, endpoint protection, and email security.
• Familiarity with Microsoft security technologies, preferably Microsoft Defender.
• Basic knowledge of security log analysis, KQL, or PowerShell is an advantage.
• 1–2 years of experience in SOC operations, cybersecurity, or IT operations.
• Experience in a Managed Security Services Provider (MSSP) environment is an advantage.
• Relevant certifications such as Microsoft SC-200, SC-900, CompTIA Security+, or ISC2 Certified in Cybersecurity are preferred.
• Strong analytical and problem-solving skills.
• Good written and verbal communication skills.
• Attention to detail and accurate documentation.
• Ability to work independently and remain effective under pressure.
• Willingness to work rotating shifts, if required.