Senior SOC Analyst – Hybrid (Makati)

About the role

This role is for a Senior SOC Analyst within Citco’s Computer Security Incident Response Team, operating in a hybrid‑setup in Makati. The analyst will lead security event analysis, threat hunting and incident response in a 24x7 SOC.

Key responsibilities

• Serve as escalation point for complex security incidents and lead end‑to‑end investigations of malware, APTs, lateral movement and insider threats.
• Conduct proactive threat hunting across on‑premise and cloud environments using SIEM, EDR and threat‑intelligence tools.
• Develop, test and maintain SOAR playbooks, tune detection rules, and improve automation of response actions.
• Collaborate with IT, Engineering and DevSecOps teams to validate findings, coordinate remediation and enhance preventative defenses.
• Mentor junior analysts, lead knowledge‑transfer sessions and create training material.

Required profile

• 3–5+ years of experience in a 24x7 SOC, CSIRT or cyber incident response role within a global enterprise.
• Strong knowledge of adversary TTPs, MITRE ATT&CK framework and threat‑intelligence standards (STIX/TAXII).
• Relevant certifications such as GCIH, GCIA, CEH, CySA+ are preferred.
• Excellent written and verbal communication for documentation and reporting.

Required skills

• Hands‑on experience with SIEM, EDR and SOAR platforms.
• Proficiency in scripting and automation using PowerShell and Python.
• Familiarity with forensic tools (Sysinternals, Wireshark) and packet capture analysis.
• Ability to analyze logs, security telemetry and network traffic on Windows and Linux systems.

What we offer

• Opportunity to work with prestigious clients and complex financial and technological instruments.
• Competitive compensation, vacation and health‑insurance benefits.
• Fast‑paced, friendly international work environment.