Threat Hunter & Incident Response Analyst (SOC)

ibex; Philippines; On-site; PHP 400,000 - 700,000; Full time

Job summary

ibex in the Philippines is seeking a Security Operations Analyst to monitor threats, triage incidents, and support vulnerability management. The role involves collaborating with cross-functional IT teams to investigate events, maintain dashboards, and drive remediation efforts.

You will analyze logs, correlate IOCs, and support audits and compliance while communicating findings clearly to stakeholders. Strong documentation skills are essential.

Qualifications

• Experience with continuous security monitoring and triage.
• Ability to triage and respond to security incidents.
• Experience with SIEM/EDR tools.
• Knowledge of log analysis and IOC identification.
• Familiarity with MITRE ATT&CK framework.
• Windows, Linux, and networking basics.
• Strong analytical and documentation skills.

Responsibilities

• Continuously monitor security dashboards, SIEM alerts, and other security monitoring tools to identify potential threats and anomalies
• Participate in security incident response activities, including triage, investigation, containment, and escalation
• Perform initial analysis and first-level response for security incidents and service/security-related queries
• Conduct log analysis and correlate security events to identify Indicators of Compromise (IOCs) and suspicious activity
• Proactively support threat hunting activities across the environment to identify hidden or emerging threats
• Coordinate with IT infrastructure, application, and network teams to triage alerts and support incident resolution
• Work with external vendors to raise support cases, track progress, and follow up on issue resolution
• Perform regular vulnerability assessments on endpoints and systems, and coordinate remediation efforts with IT support teams
• Assist in maintaining and improving the organization’s overall security posture through continuous monitoring and feedback
• Support audit and compliance requirements by providing evidence, reports, and operational security support as needed
• Review and manage security-related eService tickets on a daily basis to ensure proper logging, categorization, prioritization, and SLA adherence
• Ensure timely assignment, tracking, and closure of security tickets within the eService system in coordination with relevant stakeholders
• Validate completeness and accuracy of eService ticket documentation, including investigation notes, evidence, and resolution details
• Monitor recurring security incidents and eService ticket trends to identify root causes and improvement opportunities
• Ensure proper escalation of security tickets that breach SLAs or require higher-level technical or managerial attention
• Monitor the health, availability, and operational status of security tools including SIEM, EDR, Email Security, and log collection platforms, and report any service degradation or failures to relevant support teams
• Validate and enrich Indicators of Compromise (IOCs) against internal logs, SIEM alerts, and external threat intelligence sources to improve detection accuracy
• Perform initial malware triage and assist in collecting relevant forensic artifacts to support incident investigation activities
• Assist in testing and validation of newly onboarded log sources, SIEM integrations, and security detection use cases to ensure proper event ingestion and alerting
• Support vulnerability scanning activities and assist in tracking remediation progress and closure status in coordination with IT infrastructure and system owners.

Skills

SOC monitoring

Triage & Response

Incident coordination

Ticketing & docs

SIEM & EDR

Vulnerability coordination

Threat hunting

Tools

SIEM

EDR

IDS/IPS

Job description

ibex in the Philippines is seeking a Security Operations Analyst to monitor threats, triage incidents, and support vulnerability management. The role involves collaborating with cross-functional IT teams to investigate events, maintain dashboards, and drive remediation efforts.

You will analyze logs, correlate IOCs, and support audits and compliance while communicating findings clearly to stakeholders. Strong documentation skills are essential.