SOC L1/Tech Support

Bloomberry Resorts and Hotels Inc.; Naga; On-site; PHP 420,000 - 700,000; Full time

Job summary

Bloomberry Resorts and Hotels Inc. is seeking a Security Operations Center Analyst to monitor SIEM dashboards, alerts, and security events across network, endpoint, cloud, and applications on a 24/7 shift rotation.

The role performs initial triage, classification, and prioritization of alerts, escalates complex incidents to SOC L2 with proper documentation, and records all actions in the case management system, ensuring continuity between shifts.

Responsibilities

• Monitor SIEM dashboards, alerts, and security events across network, endpoint, cloud, and application sources on a 24/7 shift.
• Perform initial triage, classification, and prioritization of security alerts per playbooks.
• Escalate validated or complex incidents to SOC L2 with complete documentation.
• Record all alerts, investigations, and response actions in the case management system.
• Conduct routine health checks on monitoring tools and report gaps in coverage.
• Triage phishing reports and user-reported concerns, executing first-response steps.
• Execute containment actions during active incidents as directed.
• Contribute tuning recommendations to reduce false positives.
• Maintain shift-handover logs for continuity.

Job description

Duties and Responsibilities

• Monitor SIEMdashboards, alerts, and security events across network, endpoint, cloud, andapplication log sources on a 24/7 shift rotation.
• Perform initialtriage, classification, and prioritization of security alerts followingdocumented playbooks and runbooks.
• Escalate validatedor complex incidents to SOC L2 with complete and accurate documentation offindings and actions taken.
• Record all alerts,investigations, and response actions in the case management/ticketing system.
• Perform routinehealth checks on security monitoring tools and report gaps in log sources ordetection coverage.
• Triage phishingreports and user-reported security concerns, executing first-response stepsper playbook.
• Execute containmentactions as directed by SOC L2 or the incident lead during active incidents.
• Contribute tuningrecommendations to reduce false positives and improve alert quality.
• Maintain complete shift-handover logs to ensurecontinuity of monitoring between shifts.
  

Key Performance Indicators/ Key Success Factors

• Mean time to acknowledge (MTTA) alertswithin defined SLAs.
• Alert triage accuracy and quality ofescalations to SOC L2.
  
• Percentage of alerts and cases handledwithin SLA.
  
• Completeness and quality of casedocumentation and shift handovers.
  
• False-positive identification and tuningrecommendations submitted.