Security Operations Center (SOC) Analyst – Mid Shift

PEAK6

. Monitor, triage, and investigate security alerts and events in real time using SIEM, UEBA, EDR, DLP, network monitoring, email security, vulnerability, cloud, and threat intelligence tools .

Posted 11/3/2026full-timeManila • PhilippinesJuniorMid-LevelWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security operations, incident response, and threat analysis, utilizing tools such as SIEM and EDR. Proficient in developing documentation and operational playbooks while effectively communicating with stakeholders.

Highest-signal resume keywords

Security Operations ExperienceIncident Response SupportKnowledge of Cyber Kill ChainProficiency in SIEM and EDRProfessional Certifications (GCIA, GCIH, Security+)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security OperationsIncident ResponseThreat AnalysisNetwork AnalysisScripting (PowerShell, Python, Bash)Vulnerability ManagementSecurity MethodologiesTechnical Security SolutionsDocumentation DevelopmentData Analysis

Soft Skills

Clear CommunicationTeamworkAdaptabilityPrioritizationChange Management

Tools & Technologies

SIEMEDRDLPNetwork Monitoring ToolsThreat Intelligence ToolsCloud Security SolutionsFirewallsNIDS/NIPS/HIDS/HIPSSOAROrchestration Tools

Certifications & Qualifications

GCIAGCIHGCFEGCFASecurity+CCNA CyberOpsOSCPGPENGWAPTCEH

Industry Keywords

Cyber SecurityForensicsThreat HuntingMalware AnalysisNetwork SecurityOperational PlaybooksIncident ReportsSecurity FrameworksEmerging Threats24/7 SOC Coverage

Tech Stack

Tools & technologies

CloudCyber SecurityDNSFirewallsJavaPythonRubyTCP/IP.NET

About the role

Key responsibilities & impact

Monitor, triage, and investigate security alerts and events in real time using SIEM, UEBA, EDR, DLP, network monitoring, email security, vulnerability, cloud, and threat intelligence tools
Correlate and analyze events from varied enterprise sources
Provide Tier 1 and Tier 2 support and escalate or assist with remediation of critical security incidents
Provide Incident Response support when analysis confirms an actionable incident
Complete documented handovers at the end of each shift
Support threat hunting and analyze emerging threats and newly disclosed vulnerabilities with the Threat and Vulnerability Management team
Analyze trends in security log data across multiple security devices and layers
Respond to custom detections, signatures, and correlations, and suggest alert and playbook enhancements
Generate reports, dashboards, and metrics from security technologies
Communicate with internal stakeholders and senior management about security incidents and resolution
Maintain incident reports, knowledge base articles, and operational playbooks
Share information and integrate technologies with other analysts and teams
Participate in projects improving SOC efficiency and tooling
Improve and challenge existing processes and procedures
Participate in on-call rotations covering shifts and weekends
Work the 3pm–11pm Manila Time shift within a 24/7 SOC coverage pattern
Provide call-out or on-call support outside scheduled shifts when required
Work hybrid, two days in the office in BGC

Requirements

What you’ll need

Bachelor's degree in a related field (Security, Forensics, Cyber Security, or Computer Science preferred) or equivalent industry experience
At least two years of experience in a security operations or related information security role, ideally at Tier 1 or Tier 2 level
Knowledge of security methodologies and frameworks, including the Cyber Kill Chain, Diamond Model, MITRE ATT&CK, and D3FEND
Knowledge of technical security solutions, including firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavior analytics, orchestration, automation, and cloud security
Strong knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS, and HTTP protocols, network analysis, network and security applications, and email security
Good knowledge of common malware threats and attack methods
Basic knowledge of scripting and programming languages such as PowerShell, Python, Bash, .NET, Ruby, Java, or C
Willingness and ability to work rotating shifts, including nights, weekends, and public holidays
Desirable professional certifications: GCIA, GCIH, GCFE, GCFA, Security+, CCNA CyberOps, OSCP, GPEN, GWAPT, CEH, CySA+
Ability to communicate clearly in written and visual documents for different audiences
Ability to manage change, adapt priorities or processes, and work independently while demonstrating teamwork
Ability to develop thorough documentation and operational playbooks
Ability to manage multiple tasks and investigations simultaneously and prioritize by risk
Fundamental understanding of network, infrastructure, cloud, and application technologies and practices
Desire to keep learning new technologies and build knowledge and skills

Benefits

Comp & perks

Annual bonus
20 days of vacation leave plus regular and special non-working holidays
Training and development budget
Private health insurance for medical and dental
Life insurance
Flexible working hours
Parental leave
Modern city center office
Hybrid work schedule with flexibility to partially work from home
Monthly team lunch-outs
Unlimited drinks and snacks
Company recognition & rewards
Night differential in line with company policy and Philippine labor regulations