SOC Analyst

This is a fully remote position, open to applicants in Philippines.

📋 Description

• Serve as the initial point of contact for SOC customers.

• Manage support requests and incidents, ensuring they are tracked to resolution.

• Deliver Tier 1 triage and remote assistance according to established processes and runbooks.

• Accurately log, update, and manage tickets while keeping customers informed throughout the process.

• Conduct appliance health checks, basic configurations, and routine maintenance tasks.

• Assist in onboarding new Managed Security Services clients.

• Provide administrative support to customers.

• Monitor and analyze security alerts and logs for any suspicious activities.

• Investigate potential threats, including malware alerts, suspicious logins, and intrusion attempts.

• Escalate confirmed or complex incidents to Lead Analysts or Engineering, providing clear notes and evidence.

• Support incident response activities under the guidance of senior analysts.

⛳️ Requirements

• Exceptional written and verbal English communication skills.

• College degree or equivalent professional experience.

• Over 5 years of experience in IT helpdesk, service desk, technical support, or a related customer-facing IT position.

• Minimum of 2 years of direct cybersecurity experience, including alert monitoring, endpoint protection, log review, or incident handling.

• Practical experience with at least one security tool, such as CrowdStrike or another EDR platform, or a SIEM tool.

• Basic understanding of log collection, network traffic analysis, malware response, or incident response.

• Experience with ticketing systems like ServiceNow, Remedy, ConnectWise, or Zendesk.

• Strong troubleshooting abilities across Windows, networking, and common business applications.

• Good grasp of TCP/IP, DNS, firewalls, and VPNs.

• Excellent customer service skills, able to remain calm and clear while addressing urgent issues.

• Proficient in time management, documentation, and reporting.

• Willingness to work a graveyard shift (Philippine Time), with flexibility to provide on-call support when necessary.

• Must be eligible to obtain security clearance if required by the client.

• Previous experience in a SOC, Managed Security Services, or managed service provider (MSP) environment is a plus.

• Familiarity with SIEM configuration and management, or user behavior monitoring is advantageous.

• Experience in analyzing security log data from multiple sources is beneficial.

• Knowledge of Active Directory, Exchange, DNS, SMTP, SharePoint, IIS, SQL, or patch management is a plus.

• Security certifications such as CompTIA Security+, CySA+, CEH, or Cisco Security are desirable.

• Basic scripting skills in PowerShell or Python are a plus.

🏝️ Benefits

• Government-mandated benefits along with supplemental HMO coverage.

• A collaborative and professional work environment.

• Opportunities for career advancement within a growing organization.

• Fully remote work arrangement.

• Training and support to foster career development.