SOC Analyst: Splunk ES & Threat Detection Expert

Outsourcea Services Incorporated; Pasay; On-site; PHP 600,000 - 900,000; Full time

Job summary

Outsourcea Services Incorporated is seeking an experienced SOC Analyst to monitor security alerts, investigate incidents, and develop detections using Splunk Enterprise Security and Splunk Core. You will analyze endpoints and email security events and collaborate with clients to improve security postures.

The ideal candidate has 2+ years in a SOC, strong SPL skills, hands-on CrowdStrike Falcon and Proofpoint TAP/TRAP, and solid knowledge of SIEM, MITRE ATT&CK, and incident response processes.

Qualifications

• 3–5 years in cybersecurity with at least 2 years in a SOC role.
• Strong hands-on experience in security monitoring, incident response, alert triage, and threat detection.
• Advanced Splunk ES and/or Splunk Core experience with SPL query development.
• Hands-on CrowdStrike Falcon experience and familiarity with Proofpoint TAP/TRAP.
• Good understanding of SIEM, endpoint security, threat detection and response processes.
• Familiarity with MITRE ATT&CK and common cybersecurity frameworks.

Responsibilities

• Monitor and investigate security alerts, events, and potential threats within the SOC.
• Perform alert triage, incident investigation, containment, escalation, and follow-up.
• Create and optimize advanced Splunk SPL queries for threat detection and investigation.
• Develop and maintain correlation searches, dashboards, and other Splunk-based security content.
• Review and tune detection rules to improve alert quality and minimize false positives.
• Investigate security incidents involving endpoints and email using CrowdStrike Falcon and Proofpoint TAP/TRAP or comparable platforms.
• Conduct security event analysis and identify indicators of compromise and potential threats.
• Support threat hunting and proactive detection activities.
• Maintain accurate documentation of incidents, investigations, findings, and remediation actions.
• Work closely with Security Engineers, IT teams, and clients during investigations and response activities.

Skills

Splunk ES & SPL

Incident response

Threat detection

SOC monitoring

CrowdStrike Falcon

Proofpoint TAP/TRAP

SPL query writing

MITRE ATT&CK

Tools

Splunk Core

CrowdStrike Falcon

Proofpoint TAP/TRAP

Job description

Outsourcea Services Incorporated is seeking an experienced SOC Analyst to monitor security alerts, investigate incidents, and develop detections using Splunk Enterprise Security and Splunk Core. You will analyze endpoints and email security events and collaborate with clients to improve security postures.

The ideal candidate has 2+ years in a SOC, strong SPL skills, hands-on CrowdStrike Falcon and Proofpoint TAP/TRAP, and solid knowledge of SIEM, MITRE ATT&CK, and incident response processes.