SOC L3 – Incident Responder

This is a fully remote position, open to applicants in Philippines.

📋 Description

• Managing the triage and categorization of possible Events and Incidents

• Performing initial evidence gathering, case creation, and coordinating/handover to other teams as needed

• Carrying out comprehensive investigations

• Supporting senior leadership in identifying critical incidents

• Responding promptly (within specified SLA and Run Book) to support tickets

• Contributing to documentation related to Incident Handling, including standard operating procedures, playbooks, briefings, and executive reports

• Employing SIEM for the detection and investigation of security events and incidents

• Utilizing case management tools to record and monitor investigations

• Executing threat mitigation as necessary

• Performing additional tasks as assigned by the EMPLOYER and/or Client that are similar to the aforementioned duties.

⛳️ Requirements

• A minimum of 5-10 years of experience in security

• Extensive experience in incident investigation and response

• In-depth understanding of networking principles (TCP/IP, Routing, Switching)

• Proficient knowledge of network defenses such as firewalls, IDS/IPS, and Proxies

• Strong experience with scripting

• Advanced knowledge of operating systems including Windows, Linux, Mac, and Unix

• Thorough understanding of common attack vectors

• Substantial experience working with SIEM and EDR platforms

• Moderate understanding of audit requirements and controls (PCI, HIPAA, SOX, etc.)

🏝️ Benefits

• Comprehensive health benefits

• Diverse learning and growth opportunities

• User-friendly Cloud HR platform (Sprout)

• Above standard leave policies