SOC Security Analyst

SOC Security Analyst

As part of our continued expansion, we are on the lookout for a SOC Security Analyst to join our Information Security Team. The Information Security Team is based in Manila and is part of our IT organization under the direction of the CDO/ CIO.

The successful individual will take a lead role in the development of our security capabilities including our internal practices and integration of a security toolset used in capturing, analyzing, and responding to security threats. The primary objective will be to reduce operating risk and improve our security response.

The Role

In this role, you will be responsible for:

• Oversight of vulnerability and risk analysis for IT systems, enterprise applications and cloud infrastructure.
• Development of operating procedures for internal teams to integrate into their daily workflows to deliver secure enterprise applications and & infrastructure at scale.
• Consulting on technical design & engineering processes for system architectures to ensure that security is a design consideration and not a feature.
• Recommending information assurance and security solutions to support product development and customer requirements.
• Managing detailed incident response activities, leading critical security incident investigations, and working with asset owners, stakeholders, other teams, and relevant senior leadership to develop remediation plans.
• Leading meetings and working groups to address issues related to malware, threats, vulnerabilities, and cybersecurity preparedness.
• Driving the ongoing improvement of all security processes and procedures.
• Helping to develop secure-by-design on-premise and cloud infrastructure configurations/policies to prevent new on-premises/cloud security issues.
• Building automated alerting and remediation workflows for security issues.
• Investigating, documenting, and reporting on external information security threats and emerging trends in the industry, to feed into the threat hunting element of the service.

Knowledge, Skills, Qualifications & Experience

• 3-5+ years in an equivalent security role with experience in an investigative or incident response.
• Experience working with / within a Security Operations Centre.
• One or more of the following certifications are highly desired: CompTIA PentTest+, EC-Council (CEH, ECIH, CHFI, CND), Cisco CyberOps, GIAC (GCED, GCIA, GCIH), ISC2 (CISSP, CSSP) or similar security certifications.
• Detailed understanding of threats, vulnerabilities, exploits, defenses, security principles and policies.
• Knowledge of techniques attackers use to identify vulnerabilities, gain unauthorized access, escalate privileges and access restricted information.
• In-depth experience analyzing event and system logs, performing packet and forensic analysis in support of intrusion analysis or enterprise-level information security operations.
• Solid knowledge of security practices and essential security technologies (AV, EDR, FIM, HIPS, NIPS, SIEM, WAF/DAM, DLP, IDS/IPS).
• Working knowledge of information security protection/detection and authentication systems (firewalls, IDS, IPS, anti-virus, AD, AAD, RADIUS etc.).
• In-depth knowledge of Unix, Linux and Windows administration, patch deployment and system configuration and security controls,
• Detailed knowledge of communication protocols (HTTP, DNS, TCP/UDP) as well as the various techniques utilized by malware within an operating system for persistence and data collection.
• Practical experience with scripting languages (e.g., Python, Perl, Bash, PowerShell).
• Understanding of database systems, application system development and installation/implementation processes.
• Practical experience performing vulnerability scans, risk assessments and security assessments.
• Practical experience in the use of Nessus vulnerability assessment tool is highly desirable.
• Understanding of virtualization technologies (e.g. VMware) and cloud environments (e.g. Azure, AWS)
• Strong foundation in security domains such as web security, cloud services security, identity/access management, web application firewalls, intrusion detection, and static/dynamic application security testing.
• Experience in designing, implementing, and managing solutions to complex security and infrastructure environments.

Our Company

We're an independent, international business on a mission to discover and deliver innovative technologies to enhance our market-leading connectivity, data center, cloud and cybersecurity solutions.

Our USP is having a world-class global network and reputation to match. Our agility continues to be the key to our success in being a big player in the technology sector, supported by our bespoke, personalized and exceptional customer service. We constantly achieve ambitious goals by delivering cutting-edge solutions that give us, and our clients, a competitive lead. Right now, we have data centers and points of presence in more than 60 locations across the globe, with additional locations being added monthly.

Established over 20 years ago by visionary entrepreneurs with a passion for boutique customer service, these values continue to drive Continent 8 today. We have a solid foundation, a stellar back story, and an even brighter future.