SOC Incident Response Analyst (Junior-Mid)

PFCC Group; Manila; On-site; PHP 500,000 - 900,000; Full time

Job summary

PFCC Group is seeking a seasoned SOC/Incident Response professional to lead investigations, analyze logs across firewalls, IDS/IPS, SIEM, and EDR platforms, and guide a CSOC team. You will develop containment strategies, document findings, and drive continuous improvement in incident response processes.

The role emphasizes hands-on threat hunting, threat intelligence usage, and collaboration with infrastructure to strengthen security controls in a global, security-focused environment.

Qualifications

• 2–5 years in cybersecurity or IT, including minimum 2 years in SOC or Incident Response
• Degree in Computer Science, Information Security, or equivalent experience
• At least one relevant certification (Security+, CEH, GSEC, or equivalent)

Responsibilities

• Lead advanced investigations on escalated security incidents and analyze logs across multiple platforms
• Document findings throughout the incident lifecycle and guide containment/remediation steps
• Mentor CSOC Analysts to improve triage quality and event handling
• Tune SIEM/EDR tools to reduce false positives and enhance detection
• Perform proactive threat hunting and leverage threat intelligence for detection of emerging threats
• Prepare incident reports and communicate findings to management and stakeholders
• Develop and enhance incident response playbooks and SOC processes
• Collaborate with infrastructure and security teams to strengthen controls

Skills

SIEM proficiency

EDR proficiency

Threat intelligence

Packet capture

Windows/Linux/UNIX

Scripting (Python/PowerShell)

IR lifecycle

Communication & problem-solving

Education

Bachelor's degree in CS/Info Security

Security+ / CEH / GSEC or equivalent

Tools

Splunk

QRadar

ArcSight

Wireshark

Job description

PFCC Group is seeking a seasoned SOC/Incident Response professional to lead investigations, analyze logs across firewalls, IDS/IPS, SIEM, and EDR platforms, and guide a CSOC team. You will develop containment strategies, document findings, and drive continuous improvement in incident response processes.

The role emphasizes hands-on threat hunting, threat intelligence usage, and collaboration with infrastructure to strengthen security controls in a global, security-focused environment.