IT Security Analyst - Hybrid
SOC Level 1 analyst working hybrid from Pasig: monitoring SIEM alerts (Splunk, QRadar, AlienVault, Rapid7), triaging incidents, analyzing firewall/IDS/IPS and endpoint logs, and following incident response playbooks to support the company's and its clients' information security programs.
- Compensation
- Not disclosed
- Location
- Pasig, Metro Manila, Philippines
- Work setup
- Remote
- Seniority
- Junior
- Employment
- Not specified
- Experience
- 1+ years
- Category
- Security
- Posted
Skills
Must have
- Experience with SIEM platforms (e.g., Splunk, QRadar, AlienVault, Rapid7) to monitor, analyze, and respond to alerts
- Ability to review logs from firewalls, IDS/IPS, and endpoint protection to detect anomalies and threats
- Conduct first-level alert triage, determine incident severity/impact, and escalate per predefined criteria
- Basic knowledge of network protocols, TCP/IP, firewalls, and endpoint security solutions
- Typically 1-2 years of IT or cybersecurity-related experience (recent graduates with strong foundations also considered)
- Strong analytical thinking, attention to detail, and effective communication under pressure
- Stable 10 Mbps minimum Internet connectivity with backup connectivity of the same capacity
- Ability to work hybrid — remotely or reporting to the office as required
Nice to have
- Entry-level certification such as CompTIA Security+, Certified SOC Analyst (CSA), or GIAC Security Essentials (GSEC)
Full description
TASQ is looking to fill a position for a Security Operations Center Level 1 Analyst ASAP.
The pre-screening interview will take place over the phone.
About the job Security Operations Center Level 1 Analyst
Role summary
The SOC Analyst Level 1 will report in a hybrid work - either work remotely routing through the Internet or will report to the office as required.
And provide technical, administrative, and procedural support for the company's Group and its clients information security program to protect the confidentiality, integrity, and availability of information systems in accordance with the company's Groups business objectives, regulatory requirements, and strategic goals.
Specific responsibilities
Monitoring & Detection:
SIEM Tools: Experience with Security Information and Event Management (SIEM) platforms (e.g., Splunk, QRadar, AlienVault, Rapid7) to monitor, analyse, and respond to alerts.
Log Analysis: Ability to review logs from various sources (firewalls, IDS/IPS, endpoint protection) to detect anomalies and potential threats.Provide first-level contact to clients by manning virtual phones to receive called-in requests
Incident Triage & Response:
Initial Analysis: Conduct first-level triage of alerts, determining the nature of incidents, their severity, and potential impact.
Escalation: Understand when to escalate incidents based on predefined criteria, involving senior analysts when necessary.
Playbook Execution: Follow incident response playbooks and procedures for common threat scenarios like phishing, malware detection, and unauthorized access.
Threat Intelligence & Reporting:
Threat Awareness: Basic understanding of the latest threats, vulnerabilities, and attack methods.
Documentation: Consistent and thorough documentation of incidents, resolutions, and actions taken.
Collaboration: Clear communication with internal teams and external stakeholders for incident coordination.
Skillset & Qualifications:
Technical Skills: Basic knowledge of network protocols, TCP/IP, firewalls, and endpoint security solutions.
Ideally certified with entry-level qualifications like CompTIA Security+, Certified SOC Analyst (CSA), or GIAC Security Essentials (GSEC). Soft Skills:
Strong analytical thinking, attention to detail, and effective communication, especially in high-pressure situations.
Experience Level: