Threat Detection & Response Analyst

THOMSON REUTERS CORP PTE LTD - PHILIPPINE BRANCH; Manila; Hybrid; PHP 520,000 - 780,000; Full time

Benefits offered by this job

Hybrid Work Model

Career development

Mental Health Days/Headspace access

Tuition reimbursement

Volunteer days

Job summary

Thomson Reuters is seeking a Security Operations Analyst to monitor, investigate, and respond to security events across enterprise systems, networks, cloud environments, and applications.

In this role you will work with the ISRM team to strengthen detection, incident-response workflows, and broader security operations capabilities in a 24/7 environment. A hybrid schedule with onsite work 2–3 days weekly is required.

Qualifications

• Bachelor's degree required.
• 1–3 years in a SOC or similar cybersecurity operations role.
• Hands-on security investigations across OSes, networks, cloud, messaging, apps, and endpoints.
• Knowledge of networking, workstations, servers, and operating systems.
• Experience with SIEM, EDR, antivirus, forensic tools, firewalls, or cloud-security tools.
• Knowledge of attack techniques, defensive controls, and incident-response practices.
• Strong analytical and critical-thinking skills; able to work end-to-end on security events.
• Ability to make timely decisions and work independently in a 24/7 security environment.
• Hybrid role with onsite work 2–3 days weekly; rotating shifts and on-call duties.

Responsibilities

• Monitor security events and respond to incidents across a global network.
• Detect, analyze, and triage alerts from IDS/SIEM platforms.
• Conduct end-to-end security investigations across OS, networks, cloud, messaging, apps, and endpoints.
• Perform malware analysis using open-source and vendor tools.
• Document activities in case-management systems and prepare incident briefings.
• Collaborate with ISRM to improve detection, alerting, and incident-response workflows.
• Create and maintain standard operating procedures for ongoing operations.

Skills

SOC experience

Security investigations

Analytical thinking

Decision making

Independent work

Threat detection

Education

Bachelor's degree

Tools

SIEM

EDR

antivirus

forensic tools

firewalls

cloud-security tools

Job description

Thomson Reuters is seeking a Security Operations Analyst to monitor, investigate, and respond to security events across enterprise systems, networks, cloud environments, and applications.

In this role you will work with the ISRM team to strengthen detection, incident-response workflows, and broader security operations capabilities in a 24/7 environment. A hybrid schedule with onsite work 2–3 days weekly is required.