NSOC Analyst Tier 1 – Security Operations Center

About the role

We are looking for a motivated NSOC Analyst Tier 1 to join our 24 × 7 Security Operations Center in Cebu City. The analyst will monitor security tools, investigate alerts and support incident response for both internal and managed customer environments.

Key responsibilities

• Monitor SIEM, SOAR, EDR and related security platforms to detect and analyze events.
• Identify anomalies, suspicious behavior and advanced threats across infrastructure and endpoints.
• Correlate data from multiple sources, perform triage, containment and recovery actions.
• Document incidents following standardized procedures and escalation protocols.
• Conduct proactive threat hunting and research emerging threats, vulnerabilities and TTPs.
• Analyze threat intelligence feeds and develop detection use cases.
• Tune and maintain endpoint and network security controls.
• Collaborate with SOC Engineers to improve tool performance and coverage.

Required profile

• Bachelor’s degree in Computer Engineering, Electronics Engineering, IT or related field.
• Solid understanding of TCP/IP networking and enterprise protocols.
• Experience with SIEM, SOAR, EDR and incident response tools.
• Familiarity with IDS/IPS technologies and rule analysis.
• Knowledge of current cyber threats, APTs, malware and cyber‑crime tactics.
• Comfortable working in a shift‑based 24 × 7 environment.
• Industry certifications (e.g., CompTIA Security+, CySA+, CEH) are a plus.

Required skills

• SIEM, SOAR, EDR platforms
• IDS/IPS rule analysis
• TCP/IP and common enterprise protocols
• Windows and Linux operating systems
• Python, PowerShell, SQL scripting
• API integration
• MITRE ATT&CK framework
• PCAP analysis and network forensics