SOC Security Analyst — Threat Detection & Response

Lancesoft APAC; Cebu City; Sur place; PHP 450 000 - 650 000; Plein temps

Résumé du poste

Moder is seeking a Security Analyst / SOC Analyst in Cebu City to monitor security events, investigate incidents, and coordinate response across IT teams. The role requires hands-on SOC operations, SIEM/EDR tool usage, and collaboration with network, server, and application teams.

The candidate will work within a 24x7 SOC environment with flexible shift coverage. Responsibilities include threat detection, incident containment, vulnerability assessment, and security reporting.

Qualifications

• Bachelor's degree in engineering, Computer Science, Information Technology, Cybersecurity, or related discipline.
• 3–5 years of relevant cybersecurity/ SOC experience.
• Experience with SIEM, EDR, firewalls, and log analysis.

Responsabilités

• Monitor security alerts from SIEM/EDR/firewalls and other devices.
• Conduct end-to-end incident investigation and determine false positives vs true incidents.
• Use IBM QRadar or Splunk to correlate events and investigate activity.
• Perform root-cause analysis and manage incidents per IR frameworks.
• Monitor network traffic and logs to identify anomalous activity.
• Investigate user sign-ins and access privileges with Active Directory.
• Escalate incidents and track through resolution.
• Create and manage security tickets using ServiceNow or similar ITSM.

Connaissances

SOC operations

Log analysis

QRadar

Splunk

CrowdStrike

FortiGate

Active Directory

ServiceNow

Incident response

Vulnerability management

Formation

Bachelor's degree in engineering, CS, IT, Cybersecurity

Outils

IBM QRadar

Splunk

CrowdStrike

FortiGate

Active Directory

ServiceNow

Description du poste

Moder is seeking a Security Analyst / SOC Analyst in Cebu City to monitor security events, investigate incidents, and coordinate response across IT teams. The role requires hands-on SOC operations, SIEM/EDR tool usage, and collaboration with network, server, and application teams.

The candidate will work within a 24x7 SOC environment with flexible shift coverage. Responsibilities include threat detection, incident containment, vulnerability assessment, and security reporting.