Security Operations

• Monitor, triage, and analyze security alerts and events across SIEM, EDR, SSE, and WAF platforms
• Investigate security incidents end to end through triage, analysis, containment, eradication, and post-incident documentation
• Coordinate with relevant teams during incident investigations
• Determine the scope, severity, and impact of security events
• Distinguish true positives from false positives and escalate confirmed incidents
• Execute response actions such as isolating endpoints, blocking indicators, disabling compromised accounts, and enforcing access restrictions
• Conduct structured shift handovers across regions in the follow-the-sun model
• Threat hunt across endpoint, network, and log data, mapping findings to MITRE ATT&CK
• Provide feedback on detection quality and tune SIEM correlation rules, EDR detections, and WAF rules
• Enrich investigations with threat intelligence, indicators of compromise, attacker techniques, and emerging campaigns
• Develop and maintain technical documentation, standard operating procedures, and incident response playbooks
• Collaborate with IT, infrastructure, application, and security engineering teams
• Support vulnerability management and continuous improvement of the organization's security posture
• Report to the SOC Lead

Explore SOC Analyst at Tether.to. Review requirements and application details.

Remote Security Operations jobs in Philippines

SOC Analyst

Security Operations Engineer – PCI DSS

SOC Analyst

SOC Analyst Level 2

Security Operations Analyst

Security Operations Engineer – PCI DSS