SOC Analyst Level 2

This is a fully remote position, open to applicants in Philippines.

📋 Description

• Execute and support daily security operations independently.

• Monitor security alerts, triage them, and investigate any suspected security incidents.

• Evaluate the scope, impact, priority, and determine appropriate next steps.

• Document findings, actions taken, alert dispositions, and decisions made.

• Escalate confirmed or suspected security incidents with all necessary context.

• Coordinate containment, recovery, and follow-up activities during designated working hours.

• Conduct recurring security and compliance reviews across assigned frameworks and controls.

• Gather, review, organize, and maintain supporting evidence effectively.

• Identify gaps in controls, missing evidence, control drift, or potential findings.

• Monitor findings and ensure remediation commitments are tracked to completion or escalation.

• Maintain security plans, compliance records, assessment artifacts, and relevant documentation.

• Conduct reviews of vulnerabilities, endpoints, configurations, backups, access, and security tools.

• Analyze vulnerability findings and verify their remediation status.

• Assess access, authentication, permissions, shared/service accounts, and least-privilege controls.

• Conduct or assist in security risk assessments for systems, applications, vendors, projects, integrations, and significant changes.

• Maintain records of risks and remediation efforts, following up on outstanding items.

• Develop and maintain security procedures, runbooks, checklists, assessment tools, and triage guidance.

• Ensure documentation is in line with current systems and processes.

• Design, configure, execute, and evaluate approved phishing simulations and security tests.

• Identify gaps and suggest practical improvements.

• Collaborate with IT, Engineering, and other internal teams on security activities, findings, remediation efforts, and user-facing security needs.

⛳️ Requirements

• Over 3 years of relevant experience in security operations, information security, cybersecurity, or a similar role.

• Practical experience with security monitoring and SIEM tools, including alert triage, investigation, search or query functionalities, and documenting alert dispositions.

• Direct experience with device provisioning.

• Strong preference for hands-on experience with Microsoft Entra ID, Microsoft Intune, Conditional Access policies, and related endpoint and access controls.

• Solid understanding of vulnerability management, access control, endpoint security, logging, and incident response.

• Experience in performing recurring security or compliance control activities and producing clear, review-ready evidence and documentation.

• Preferred experience with CMMC, NIST SP 800-171, PCI DSS, or similar frameworks and relevant security certifications.

• Excellent organizational skills, prioritization abilities, written communication, and follow-through.

• Capable of managing recurring responsibilities and competing deadlines independently.

• Proven problem-solving abilities and sound judgment in situations with incomplete information or unclear conditions.

• Availability to work during core business hours from 7:00 AM to 4:00 PM PST.

• Enthusiastic about remote work and collaboration within a distributed team.

• Minimum home internet speed of 25MBPS.

🏝️ Benefits

• PHP 1150/month Rice Allowance after the probationary period.

• 160 hours of accrued PTO, with an additional 8 hours for each year of service, up to a maximum of 40 extra hours.

• Paid US Holidays.

• Mandatory Philippine statutory benefits.

• Government Contribution.

• Night Differential, Holiday Pay Rate, and Overtime Pay.

• 13th Month Pay.

• HMO coverage starting on Day 1.

• PHP 580/month internet stipend.

• Enjoyable extras that enhance the remote work experience.

• Surprise treats (yes, including coffee!).

• Gifts of appreciation and recognition.

• Company shout-outs and celebrations.

• Virtual parties and team moments throughout the year.