Job Summary: Entry level position in the SOC team. Triage specialist whose responsibility is to review real-time event data, monitor alert queue on a rotating 24 x 7 x 365 basis, and to determine relevance and urgency of the threat alerts. Perform initial analysis and response to incidents. Monitors health of security sensors and endpoints, keeping abreast of intelligence from IT security community and other industry sources. Conducts asset discovery and vulnerability scanning; track and monitor remediation efforts including report preparations. Specific Duties & Responsibilities: <ul style="margin-top:0.0in;margin-bottom:1.0E-4pt"> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Continuously monitor security events from various SOC log sources, and analyze threat alerts to determine relevance and urgency (triaging).</li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Monitors health of security sensors and endpoints</li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Perform system/network inventory and validation, log collection, investigate threat alerts to reach the root cause and respond to incidents/threat alerts.</li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Prepare alert tickets, collects alert information, follow incident playbooks and provide the context of an incident to L2 analyst for further investigation and resolution.</li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Runs vulnerability scans and reviews vulnerability assessment reports.</li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Manages security monitoring tools, enroll log sources and provides input on tuning and optimizing security systems.</li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Develops and implement security event and threat detection logic (Use Cases)</li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Provide input to constantly improve SOC security process, policies, procedures and incident response playbooks.</li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Staying up-to-date with emerging security threats and vulnerabilities including applicable regulatory security requirements.</li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Other tasks that may be assigned</li> </ul> Job Specifications: <ul style="margin-top:0.0in;margin-bottom:1.0E-4pt"> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">A Bachelor's Degree in a relevant area of study with a preference for Information Security, Computer Science or Computer Engineering</li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Demonstrate a foundational understanding of IP networking, routing and switching, including multiple operating systems (Windows, Solaris, *nix) and system administration.</li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Self-starter, analytical thinker and must possess a genuine passion for Information Security.</li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Has basic understanding of Information Security concepts and practices</li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Detail oriented with strong organizational and analytical skills </li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Programming skills as well as host, network and application investigative skills </li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Knowledgeable in security technology like SIEM, anti-malware, firewall, IPS/IDS, logging, monitoring and vulnerability management.</li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Basic knowledge of client-server applications, multi-tier web applications, relational databases.</li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Task and delivery management skills</li> </ul> <ul style="margin-top:0.0in;margin-bottom:1.0E-4pt"> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Good written and verbal communication and presentation skills</li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Conflict and problem management skills</li> </ul> <ul style="margin-top:0.0in;margin-bottom:1.0E-4pt"> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Ability to work on 24 x 7 x 365 shift rotation</li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Preferred Information Security professional designations such as CISSP, CISM, CISA </li> <li style="margin:0.0in -7.05pt 1.0E-4pt 0.0px;text-align:justify;font-size:10.0pt;font-family:'Times New Roman', serif">Previous Security Operations Centre Experience in conducting security investigations a plus</li> </ul>

SECURITY THREAT ANALYST (pasay, Manila, Philippines) @ MBTCHCM

About this role

Ready to apply?