SOC L2 Incident Responder

Trends Group, Inc.; Philippines; Sur place; PHP 420 000 - 720 000; Plein temps

Résumé du poste

Trends Group, Inc. in the Philippines is seeking a Security Operations professional to monitor incidents, respond to alerts, and help safeguard information systems.

You will triage, investigate, and resolve issues within established SLAs, applying SOAR and SIEM playbooks and contributing to RCA reports. The ideal candidate has a bachelor’s degree in IT and 1–2 years in security operations or incident handling, plus ITSM or cybersecurity training or certifications.

Qualifications

• Bachelor's degree in an IT-related field as listed.
• 1–2 years of experience in Security Operations or incident handling.
• ITSM, IT infrastructure or cybersecurity training/certifications.

Responsabilités

• Complete assigned tasks efficiently while adhering to processes and escalation procedures.
• Identify and report process gaps, contributing to TOC knowledge resources.
• Collaborate with cross-functional teams to enhance workflows and a positive working environment.
• Comply with policies and professionally represent Trends at all times.
• Monitor system availability and capacity, escalating issues within thresholds.
• Support BCP compliance and report operational risks.
• Meet SLA requirements and provide feedback on system configurations.
• Triage, restore, and resolve client incidents; process service requests; prepare RCA reports.
• Analyze SOAR and SIEM alerts, implement corrective actions, and document findings.
• Manage client access and IT assets, reporting non-compliant or high-risk assets.
• Support problem management by investigating root causes and CA/PA actions.
• Adhere to procedures and update knowledge bases; participate in service improvement.

Connaissances

Incident handling

Security operations

Formation

Bachelor's degree in an IT-related field (Computer Science, Computer Engineering, Information Technology, or Electronics and Communications Engineering)

Description du poste

I. Purpose

Support and enhance operational performance by implementing new services and maintaining service excellence. This role is responsible for investigating, responding to, and resolving incidents using mitigation, preparedness, response, and recovery methodologies to safeguard information security and system availability.

II. Duties and Responsibilities

• Complete assigned tasks efficiently while adhering to established processes and escalation procedures

• Identify and report process gaps, contributing to the continuous improvement of TOC knowledge resources

• Collaborate with cross-functional teams to enhance workflows and foster a positive working environment

• Comply with company policies and professionally represent Trends at all times

• Monitor system availability and capacity, escalating issues to ensure resources remain within defined thresholds

• Support Business Continuity Planning (BCP) compliance and report identified operational risks

• Meet Service Level Agreement (SLA) requirements and provide feedback on system configurations

• Triage, restore, and resolve client incidents; process service requests; and prepare Root Cause Analysis (RCA) reports

• Analyze SOAR and SIEM alerts, implement corrective actions, follow established playbooks, and document findings

• Manage client access and IT assets, identifying and reporting non-compliant or high-risk assets

• Support problem management activities by investigating root causes and implementing corrective and preventive actions (CA/PA)

• Adhere to operational procedures, update knowledge bases, and actively participate in service improvement initiatives

III. Qualifications

• Bachelor’s degree in an IT-related field (Computer Science, Computer Engineering, Information Technology, or Electronics and Communications Engineering)

• One to two (1–2) years of experience in Security Operations or incident handling

• Relevant training or certifications in IT Service Management (ITSM), IT infrastructure, or cybersecurity (e.g., eCIR, ECIH, GCIH, CySA+, CSIH)