SOC Agent – Incident Handling

This is a fully remote position, open to applicants in Philippines.

📋 Description

• Performing triage and categorization of potential events and incidents.

• Engaging in initial evidence gathering, case creation, and coordinating hand-offs to other teams as needed.

• Responding promptly to support tickets within the defined SLA and Run Book.

• Contributing to the documentation of incident handling, including standard operating procedures, playbooks, briefings, and executive reports.

• Utilizing SIEM tools for the detection and documentation of security events and incidents.

• Executing threat mitigation as necessary.

⛳️ Requirements

• Bachelor's Degree in Computer Science, Information Security Assurance, or equivalent experience.

• Minimum of 1 year of experience in security.

• Familiarity with networking concepts (TCP/IP, Routing, Switching).

• Knowledge of operating systems including Windows, Linux, Mac, and Unix.

• Proficient understanding of common TCP/IP protocols and OSI Layers 1-4.

• Capability to analyze packets using tools like Wireshark (preferred).

• Understanding of MITRE ATT&CK and Cyber Kill Chain frameworks (preferred).

• Basic comprehension of secure connectivity options such as SSL and IPSEC (preferred).

• Experience with SIEM, EDR, and other cybersecurity platforms (preferred).

🏝️ Benefits

• Comprehensive health benefits.

• A variety of learning and growth opportunities.

• Access to a Cloud HR platform (Sprout).

• Above-average leave policies.