SOC Analyst: Threat Detection & Incident Response

TaskUs; Las Piñas; On-site; PHP 500,000 - 750,000; Full time

Job summary

TaskUs is seeking a Security Operations Center Analyst to join our on-site team in Las Piñas. The role involves triage, investigation, and containment of security events, while contributing to detection improvements and incident response activities.

You will work with clients on security alerts, perform in-depth threat analyses, and help refine playbooks and reporting. A strong background in cybersecurity fundamentals and hands-on SIEM/EDR experience are essential.

Qualifications

• 1+ year of experience in a Security Operations Center, Incident Response, or Cybersecurity Analyst role.
• Experience investigating security events across endpoint, network, and cloud platforms.
• Strong understanding of cybersecurity frameworks such as NIST, MITRE ATT&CK, CIS Controls, and Cyber Kill Chain.
• Hands-on experience with SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, or LogRhythm.
• Experience with endpoint detection and response (EDR) solutions such as Microsoft Defender for Endpoint, CrowdStrike, SentinelOne, or Carbon Black.
• Knowledge of networking protocols, operating systems, authentication technologies, and cloud security concepts.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent written and verbal communication skills (you will be on customer calls).

Responsibilities

• Investigate security alerts and suspicious activities from our client’s security stack, 3rd party tools, and cloud platforms.
• Perform detailed investigations into security alerts, attacker techniques, and identify emerging threats.
• Correlate events from multiple security tools and data sources to determine risk, business impact, and required remediation actions.
• Assist with developing and maintaining detection rules, use cases, playbooks, and response procedures.
• Validate security events and reduce false positives through tuning and optimization of monitoring tools.
• Assist with preparing post-event reports, executive summaries, and technical documentation.
• Stay current on threat intelligence, attacker tactics, techniques, and procedures (TTPs), and emerging cybersecurity trends.

Skills

SOC Experience

SIEM Tools

EDR Tools

Networking concepts

Cloud security

Communication

Threat analysis

Education

Bachelor's degree in Cybersecurity

Tools

Microsoft Sentinel

Splunk

QRadar

LogRhythm

Defender for Endpoint

CrowdStrike

SentinelOne

Job description

TaskUs is seeking a Security Operations Center Analyst to join our on-site team in Las Piñas. The role involves triage, investigation, and containment of security events, while contributing to detection improvements and incident response activities.

You will work with clients on security alerts, perform in-depth threat analyses, and help refine playbooks and reporting. A strong background in cybersecurity fundamentals and hands-on SIEM/EDR experience are essential.