SOC Incident Response & Threat Detection Consultant

Monitor Deloitte; Manila; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

Deloitte Philippines seeks a Cyber Security Operations Centre (SOC) Consultant to monitor, detect, investigate and respond to threats across client environments. You will work with multidisciplinary teams to operate security processes, using SIEM, SOAR, EDR, and cloud security tools to strengthen client resilience.

The role emphasizes incident handling, rule and playbook development, and collaboration with client and IT stakeholders.

Qualifications

• Bachelor's degree in computer science, cybersecurity, information technology, or a related field.
• 3-5 years of experience in cyber security operations, security monitoring, incident response, or a related role.
• Good understanding of cyber security principles, common attack techniques, network and endpoint security, and incident response processes.
• Hands-on experience with one or more security technologies, such as SIEM, SOAR, EDR, NDR, IDS/IPS, firewalls, cloud security or threat intelligence platforms.
• Experience investigating security alerts and incidents, documenting findings and recommending remediation actions.
• Familiarity with NIST/NIST CSF, MITRE ATT&CK is advantageous.
• Strong analytical, problem-solving, communication and teamwork skills in client-facing environments.
• Relevant cyber security certifications such as Security+, CEH, GCIH, GCIA or CISSP are preferred.

Responsibilities

• Monitor and triage security alerts and events across networks, endpoints, cloud environments and business apps.
• Investigate potential security incidents, assess their impact and support root cause analysis.
• Support incident response activities, including containment, eradication, recovery and post-incident review.
• Operate and maintain cyber security technologies including SIEM, SOAR, endpoint, network, cloud and threat intel tools.
• Develop and tune detection rules, use cases, playbooks and alerting logic to improve monitoring.
• Collaborate with client, IT and cyber security stakeholders to resolve incidents and improve security controls.

Skills

Cyber security fundamentals

Security incident response

Analytical thinking

Client-facing communication

Education

Bachelor's degree in computer science, cybersecurity, information technology, or a related field

Tools

SIEM

SOAR

EDR

NDR

IDS/IPS

Firewalls

Cloud security

Threat intel platforms

Job description

Deloitte Philippines seeks a Cyber Security Operations Centre (SOC) Consultant to monitor, detect, investigate and respond to threats across client environments. You will work with multidisciplinary teams to operate security processes, using SIEM, SOAR, EDR, and cloud security tools to strengthen client resilience.

The role emphasizes incident handling, rule and playbook development, and collaboration with client and IT stakeholders.