Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
75
Хорошая вакансия
развернуть
Обязанности понятны и включают практическую работу с инцидентами и детектированием в финтехе, но ночные смены, выходные, праздники и дежурства заметно влияют на баланс работы и личной жизни.
Сменный график
Актуальные задачи
Финтех-направление
Понятная роль
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Security Operations Center (SOC) Analyst (Cybersecurity): Monitoring, triaging, and investigating real-time security alerts across SIEM, UEBA, EDR, DLP, network, cloud, and threat intelligence tools with an accent on incident response, detection engineering, and threat analysis. Focus on correlating events across enterprise systems, supporting threat hunting and remediation, improving alert playbooks, and maintaining 24/7 SOC coverage through rotating shifts.
Location: Manila, Philippines; hybrid work with two days per week in the BGC office. Shift: 3pm–11pm Manila Time, with rotating nights, weekends, public holidays, and on-call support.
Company
hirify.global builds fintech software that supports digital wealth management and access to financial markets for more than 22 million end customers.
What you will do
Monitor, triage, investigate, and correlate security alerts and events across SIEM, UEBA, EDR, DLP, network monitoring, email security, vulnerability, cloud, and threat intelligence technologies.
Provide Tier 1 and Tier 2 support, assist with incident response, escalate critical incidents, and complete documented shift handovers.
Support threat hunting and analyze emerging threats, vulnerabilities, malware, security trends, and log data across multiple security layers.
Develop and improve custom detections, signatures, correlations, alerting, playbooks, dashboards, reports, and security metrics.
Communicate incident updates and resolution status to internal stakeholders, including senior management.
Maintain incident reports, knowledge base articles, operational playbooks, and participate in projects improving SOC efficiency and tooling.
Requirements
Bachelor’s degree in Security, Forensics, Cyber Security, Computer Science, or a related field, or equivalent industry experience.
At least two years of experience in security operations or a related information security role, ideally at Tier 1 or Tier 2 level.
Knowledge of the Cyber Kill Chain, Diamond Model, MITRE ATT&CK, and D3FEND frameworks.
Knowledge of firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavior analytics, orchestration, automation, and cloud security.
Strong knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS, HTTP, network analysis, network and security applications, and email security.
Good knowledge of common malware threats and attack methods.
Basic knowledge of scripting and programming languages such as PowerShell, Python, Bash, .NET, Ruby, Java, or C.
Ability to communicate clearly, document investigations and playbooks, manage multiple risk-prioritized tasks, work independently and collaboratively, adapt to change, and continue learning.
Willingness and ability to work rotating shifts, including nights, weekends, and public holidays.
Nice to have
Experience as a security analyst, incident handler or responder, security engineer, or penetration tester.
Professional certifications such as GCIA, GCIH, GCFE, GCFA, Security+, CCNA CyberOps, OSCP, GPEN, GWAPT, CEH, or CySA+.
Culture & Benefits
Collaborative information security environment guided by open and honest communication, teamwork, inclusion, servant leadership, and personal accountability.
Full-time employee benefits include a market-leading salary, annual bonus, private medical and dental insurance, life insurance, and training and development funding.
20 days of vacation leave plus regular and special non-working holidays, parental leave, flexible working hours, and hybrid work.
Modern city-center office, night differential in line with company policy and Philippine labor regulations, team lunch-outs, refreshments, and recognition rewards.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →