SOC Analyst I - Philippines

Digital Maelstrom; United States; Remote; USD 80,000 - 120,000; Full time

Job summary

Digital Maelstrom is seeking a security operations professional for a remote role within the cybersecurity organization. You will monitor client environments, detect and escalate operational or security events, and collaborate with engineers, principal consultants, and client contacts such as stakeholders and management.

You will review logs, test security posture, and provide high-quality reports. This role requires strong communication, teamwork, and a commitment to confidentiality, integrity,

Qualifications

• Proven ability to communicate remotely and document findings clearly.
• Demonstrated attention to detail and organizational skills.
• Experience working with security tools in a SOC context.

Responsibilities

• Monitor client environments for security events and escalate as needed.
• Review logs and security data to identify threats or breaches.
• Collaborate with senior engineers, consultants, and client contacts.
• Develop and test security configurations and remediation actions.
• Provide timely written and verbal reports to stakeholders.
• Participate in agile team practices and continuous improvement.

Skills

Remote communication

Attention to detail

Team collaboration

Education

Bachelor's degree or relevant certification

Tools

SIEM

IDS

Firewalls

Anti-malware

Job description

This is a remote position.

Position Overview

This position is within the cybersecurity organization at Digital Maelstrom . Candidates are responsible for the timely detection and escalation of operational or security events in monitored client environments. They will work closely with other engineers, principal consultants, and various client contacts such as stakeholders, architects, business analysts and management.

Duties

• Gather, compile, and synthesize information regarding technology and processes.
• Must possess strong interpersonal and communications skills
• Ability to work effectively with customers to solve business challenges while balancing the need for confidentiality, integrity, and availability.
• Proven ability to work with diverse audiences and translate technical information into non-technical information.
• Commitment to fostering a diverse working environment.
• Be capable of continually improving one’s own skill set relevant to business and technical missions with oversight. Must take initiative, negotiate with project management, and execute successfully on plans.
• Able to participate in agile team practices; reflect honestly on own performance, participate in shared team accountability, recommend changes for team improvement
• Must be able to handle sensitive information with appropriate discretion according to company policies
• Provide frequent status updates to clients and internal stakeholders
• Review logs and other security event data for signs of cyber threats, vulnerabilities, or attacks and embargo to senior engineers
• Work with senior engineers to test complicated and detailed aspects of a security posture or configuration, identify deficiencies, and recommend remediation actions
• Work with senior engineers to write manual and automated tests as part of a normal security practice.
• Operate SOC (Security Operations Center) technologies according to documented standard operating procedures, including but not limited to a Security Information Event Management (SIEM) platform, Intrusion Detection Systems (IDS), Firewalls, Anti-Malware solutions, and insider threat software
• Prepare assigned reports for the SOC shift manager
• Provide high quality written and verbal reports as required
• Recommend new alert rules and logic to detect events of interest for approval by security analysts
• Assist in the design, documentation, and execution of security awareness programs
• Participate in risk-based analysis of security controls and requirements
• Provide technical assistance to other IT (Information Technology) functions with regards to security objectives and requirements
• Monitor, triage, and respond to helpdesk calls, operational alerts, and tickets for clients as a first point of contact
• Responsible for managing helpdesk ticket intake queues and responding to requests
• Respond and escalated when appropriate to alerts, events, and requests with appropriate urgency
• Assist clients with technical support needs
• Manage personal tasks and prioritization including actions for ticket queues, scheduling, and communications to clients and stakeholders
• Other duties as assigned.

Requirements Required Qualifications

• Familiar and efficientincomputer skillsto communicate remotely, author documents & reports,and organize work
• Ableto identify criticalIT operational or securityissues quickly and accurately
• Experience supporting,using, and investigatingissues onWindows, Linux, macOS platforms
• Understandsnetworking fundamentals, protocols & application behaviors as related to security matters
• Self-motivated, detail-oriented,methodical, and organized to accomplish assigned tasks

Preferred Qualifications

• A solid understanding of best practices and techniques in attacking or defending information systems
• Have experience with detection and SIEM tools and techniques (Sigma, Elastic Security, Microsoft Defenderfor Endpoint,etc.)
• Experience with Command-line Interfaces, Shells and Shell scripting
• Experience with Microsoft 365
• Experience with secure configuration and implementation of systems
• Cloud experience (any of AWS (Amazon Web Services), Azure, Google Cloud)
• Bachelor’s Degree in Computer Science, Information Systems, or related field; or certification in relevant programs (CISSP, CSSLP, OSCP, GPEN, GIAC, CompTIA A+, Network+, Security+, or others); or equivalent work experience