SOC Analyst (L2 Cybersecurity Operations) - Night Shift

Adventus; Makati; On-site; PHP 400,000 - 700,000; Full time

Job summary

Adventus is seeking a SOC Analyst to join our Managed Security Operations Center (SOC), supporting customers across ASEAN. You will monitor security alerts, investigate threats, manage incidents, and coordinate with customers and internal teams to ensure timely incident resolution.

This role has a normal working hour of 11pm - 8am on weekdays. If needed, you are required to work 3.5 days night shift based on business needs

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS, or related field.
• 1–2 years in SOC operations or cybersecurity.
• Familiarity with SIEM monitoring, incident management, and endpoint protection.
• Certifications such as Microsoft SC-200/SC-900, CompTIA Security+ or ISC2 preferred.
• Strong analytical, documentation, and communication skills.
• Willingness to work rotating night shifts.

Responsibilities

• Monitor security alerts across multiple platforms and identify potential threats.
• Triage and investigate alerts, analyse logs, differentiate true/false positives.
• Assess incident severity, gather indicators of compromise, document findings.
• Manage and track security incidents in ServiceNow, ensuring SLA compliance.
• Communicate incident updates and recommendations to customers.
• Escalate complex incidents to L3 analysts and SOC Manager; support containment.
• Maintain incident records, shift handovers, and documentation.

Skills

SOC operations

Threat detection

Incident management

Analytical thinking

Communication skills

Education

Bachelor's degree in Cybersecurity/IT

Tools

Microsoft Defender

SIEM

PowerShell

KQL

ServiceNow

Job description

Adventus is an Information and Communications Technology (ICT) Solutions and Services Provider with a wide footprint across the globe.

We help organizations bring about positive transformation to their businesses by leveraging intelligent applications of innovative solutions and pertinent services to remain winners in today's ultra-competitive marketplace.

With our strong network of technology partners, excellent domain expertise and differentiated value proposition, we are able to go above and beyond for our customers, far exceeding expectations.

Role Overview

We are seeking SOC Analysts to join our Managed Security Operations Center (SOC), supporting customers across ASEAN. You will monitor security alerts, investigate potential threats, manage incidents, and coordinate with customers and internal technical teams to ensure timely incident resolution.

This role has a normal working hour of 11pm - 8am on weekdays. If needed, you are required to work 3.5 days night shift based on business needs

Working hours

Full night shift: 9pm-10am (13 hours)

Half Night shift: 9pm - 3.30am / 3am - 9.30am (6.5 hours)

Job Responsibilities

• Monitor security alerts across multiple security platforms and identify potential threats.

• Triage and investigate alerts, analyse security logs, and distinguish true positives from false positives.

• Assess incident severity, gather indicators of compromise (IOCs), and document investigation findings.

• Manage and track security incidents in ServiceNow, ensuring compliance with SLAs.

• Communicate incident updates and recommendations to customers professionally.

• Escalate complex incidents to L3 analysts and the SOC Manager, and support containment and remediation activities.

• Maintain accurate incident records, shift handovers, and operational documentation.

Job Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.

• Understanding of cybersecurity fundamentals, SIEM monitoring, incident management, identity security, endpoint protection, and email security.

• Familiarity with Microsoft security technologies, preferably Microsoft Defender.

• Basic knowledge of security log analysis, KQL, or PowerShell is an advantage.

• 1–2 years of experience in SOC operations, cybersecurity, or IT operations.

• Experience in a Managed Security Services Provider (MSSP) environment is an advantage.

• Relevant certifications such as Microsoft SC-200, SC-900, CompTIA Security+, or ISC2 Certified in Cybersecurity are preferred.

• Strong analytical and problem-solving skills.

• Good written and verbal communication skills.

• Attention to detail and accurate documentation.

• Ability to work independently and remain effective under pressure.

• Willingness to work rotating shifts, if required.