SOC Threat Hunter & Incident Response Analyst

Ibex Limited; Davao del Sur; On-site; PHP 480,000 - 840,000; Full time

Job summary

Ibex Limited in the Philippines is seeking a Security Operations Analyst to monitor, hunt threats, and respond to incidents. You will work with IT teams to analyze logs, correlate events, and support vulnerability management and compliance tasks.

Responsibilities include triage and containment of incidents, performing initial analysis, validating IOCs, and coordinating with vendors for resolution. A strong understanding of MITRE ATT&CK, SIEM, and log analysis will help you thrive in this role.

Qualifications

• Experience in monitoring security dashboards and incident response.
• Knowledge of SIEM, EDR tools, and log correlation.
• Familiarity with MITRE ATT&CK framework and common attack techniques.
• Strong analytical and documentation skills.

Responsibilities

• Continuously monitor security dashboards, SIEM alerts, and other tools to identify threats and anomalies.
• Participate in security incident response activities including triage, investigation, containment, and escalation.
• Perform initial analysis and first-level response for security incidents and service-related queries.
• Conduct log analysis and IOC enrichment to improve detection.
• Support threat hunting activities across the environment.
• Coordinate with IT teams and vendors to triage alerts and resolve incidents.
• Perform regular vulnerability assessments and coordinate remediation with IT teams.
• Assist in audit and compliance activities with evidence and reports.

Skills

SOC operations

Incident response

Threat hunting

Log analysis

Communication

Education

Bachelor's degree in CS/IT or equivalent

Tools

SIEM

EDR/XDR

IDS/IPS

Job description

Ibex Limited in the Philippines is seeking a Security Operations Analyst to monitor, hunt threats, and respond to incidents. You will work with IT teams to analyze logs, correlate events, and support vulnerability management and compliance tasks.

Responsibilities include triage and containment of incidents, performing initial analysis, validating IOCs, and coordinating with vendors for resolution. A strong understanding of MITRE ATT&CK, SIEM, and log analysis will help you thrive in this role.