SOC Security Analyst II: Triage & Incident Response

BlueVoyant; Manila; Hybrid; PHP 670,000 - 1,004,000; Full time

Job summary

BlueVoyant is seeking a SOC Security Analyst L2 to join our Security Operations Center, defending our global customers against constant and evolving adversary activity.

In this role you will own and work through a queue of security alerts and tickets, carrying out thorough investigations, resolving cases accurately and efficiently, and escalating confirmed or complex incidents to L3 analysts with clear, well‑documented findings.

Qualifications

• Ability to manage a high-volume ticket queue with accuracy and speed.
• Strong written and verbal communication to document findings clearly.
• Teamwork within a globally distributed analyst group.
• Ability to work directly with clients to provide updates and gather information.
• Knowledge of SIEM, cloud security tools, and endpoint security technologies.

Responsibilities

• Monitor, triage, and investigate security alerts and tickets from SIEM, endpoint, and EDR sources.
• Own tickets through resolution, prioritizing by severity and impact with SLAs.
• Research indicators to determine reputation and suspicious attributes.
• Analyze suspicious files, emails, URLs, and attacker infrastructure for investigations.
• Determine malicious vs benign activity and escalate to L3 with evidence.

Skills

Ticket triage

Communication skills

Team collaboration

Client interaction

Attention to detail

Runbooks

Tools

SIEM

Microsoft Cloud App Security

EDR

Job description

BlueVoyant is seeking a SOC Security Analyst L2 to join our Security Operations Center, defending our global customers against constant and evolving adversary activity.

In this role you will own and work through a queue of security alerts and tickets, carrying out thorough investigations, resolving cases accurately and efficiently, and escalating confirmed or complex incidents to L3 analysts with clear, well‑documented findings.