Junior SOC Analyst – Shift Work

Expereo

. Monitor security alerts across SIEM, endpoint detection and email security platforms .

Posted 10/22/2026full-timeTaguig • PhilippinesJunior💰 ₱900,000 - ₱1,200,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security operations, including SIEM management, alert triage, and incident response. Proficient in analyzing security incidents and documenting findings while collaborating effectively with senior security team members.

Highest-signal resume keywords

SIEM ManagementIncident ResponseEmail Security FundamentalsLog Data AnalysisPhishing Awareness

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Alert TriageIncident ClassificationNetwork Telemetry AnalysisWindows FundamentalsLinux FundamentalsCloud Security MonitoringQuery Language KnowledgeBasic Scripting Knowledge

Soft Skills

Clear Written CommunicationMethodical ApproachSound Judgement

Tools & Technologies

Microsoft DefenderElastic SecurityMicrosoft SentinelSplunkCrowdStrike

Certifications & Qualifications

SC-200CompTIA Security+CompTIA Network+Blue Team Level 1

Industry Keywords

Phishing SimulationMITRE ATT&CK FrameworkEndpoint ManagementDevice Compliance

Tech Stack

Tools & technologies

AWSCloudLinuxPythonSplunk

About the role

Key responsibilities & impact

Monitor security alerts across SIEM, endpoint detection and email security platforms
Triage and classify alerts as benign, false positive, suspicious or confirmed incidents
Gather evidence and correlate activity across endpoint, identity, email and network telemetry
Investigate reported and quarantined email, including message headers, sender reputation, embedded links and attachments
Execute approved response playbooks for routine cases
Escalate indicators of compromise, lateral movement or data exposure to senior analysts with supporting evidence
Document observations, evidence, assessments and actions for each case
Track open cases through closure and ensure alerts are handled
Monitor security tooling coverage and follow up on devices outside policy
Contribute to triage procedures, runbooks and operational reporting
Support awareness activities such as phishing simulation campaigns
Work closely with senior security team members

Requirements

What you’ll need

One or two years experience in a security operations or similar technical role
Practical experience operating a SIEM in a Level 1 capacity, including alert queue management, triage, classification and escalation
Hands-on exposure to enterprise security platforms such as Microsoft Defender, Elastic Security, Microsoft Sentinel, Splunk or CrowdStrike
Ability to search and interpret log data and draw conclusions from incomplete information
Understanding of phishing, credential theft, malware delivery and social engineering
Email security fundamentals, including message headers and SPF, DKIM and DMARC
Networking, Windows and Linux fundamentals sufficient to interpret host and network telemetry
Clear written English for case documentation and escalation
Methodical and consistent under repetitive workload, with sound judgement on when to escalate
Desirable: exposure to cloud security monitoring, particularly Microsoft Defender and AWS environments
Desirable: query language knowledge in KQL, Lucene, EQL or equivalent
Desirable: familiarity with the MITRE ATT&CK framework
Desirable: experience with endpoint management or device compliance platforms
Desirable: entry-level certification such as SC-200, CompTIA Security+, CompTIA Network+ or Blue Team Level 1
Desirable: basic scripting knowledge in PowerShell or Python

Benefits

Comp & perks

Equal Opportunities employer supporting and celebrating every employee
Inclusive workplace respecting people regardless of background, religion, nationality, sexual orientation, age, or physical condition
Focus on Environment, Social and Governance
Community-focused initiatives