Security Operations Analyst
Full-time
Workstreet
About Workstreet At Workstreet , we’re on an exciting journey to help businesses scale securely by designing and implementing cutting-edge security and compliance programs. As a fast-growing startup, we specialize in a wide range of GRC (governance, risk, and compliance) services that support frameworks across SOC 2, ISO 27001, GDPR, CMMC, NIST 800-171, NIST 800-53, and FedRAMP. We empower companies to meet regulatory requirements and enhance their cybersecurity posture from day one. Get to know the Security Services Team We are the team our clients trust to be their eyes and ears around the clock, watching over their environments even when their own teams are offline. Our MDR function spans real-time monitoring and alert triage, threat detection and investigation, and incident analysis and response guidance, using the EDR, SIEM, IPS, WAF, and firewall platforms deployed across our client base to catch what automated rules miss and help clients stop incidents before they become breaches. We don't just close tickets. Our analysts tune detection logic, document what they see, and escalate with the context client stakeholders need to act fast. If you want to build deep, hands-on detection and investigation experience across a wide range of client environments, and be part of a team that backs each other up on every shift, you'll be in good company here. The Opportunity Workstreet is seeking a Security Operations Analyst to join our Security Services team. This is a hands-on monitoring and investigation role: you'll triage and validate alerts, lead deep investigations across EDR, firewall, IPS, WAF, and SIEM tooling, and deliver clear, actionable findings and remediation guidance across our clients' environments, with clients owning execution of the actual response. You'll work as part of a 24x7 rotating shift schedule, partnering directly with client stakeholders to keep detection coverage strong around the clock. The successful candidate will ramp into our detection stack and client environments quickly, taking ownership of shift-level monitoring, investigation quality, and escalation judgment within their first 30 days. What You'll Do
- Execute real-time monitoring and triage - monitor alerts across EDR, firewall, IPS, WAF, and SIEM platforms, prioritizing severity and distinguishing true positives under time pressure.
- Maintain 24x7 shift coverage - deliver continuous threat monitoring as part of a rotating shift schedule including assigned nights, weekends, and holidays.
- Conduct deep incident investigations - correlate telemetry across EDR, network, and cloud log sources to determine root cause, scope, and indicators of compromise.
- Deliver remediation guidance - provide clear incident analysis and containment recommendations to client teams who own response execution within their environments.
- Tune detection logic and rules - refine SIEM correlation rules and detection logic to eliminate false positives and close security coverage gaps.
- Maintain SOC playbooks and documentation - document investigation findings and incident timelines in case management systems while updating standard operating runbooks.
- Drive cross-functional security alignment - partner with GRC engineers and vCISOs to ensure threat detection activity supports client compliance obligations.
- Support shift handoffs and mentorship - execute seamless investigation handoffs across shift rotations while guiding junior analysts on investigative techniques.
- Experienced SOC analyst - bring 3+ years of hands-on experience monitoring, triaging, and investigating security alerts within a high-velocity SOC setting.
- Multi-platform telemetry investigator - skilled at correlating data daily across EDR, firewall, IPS, WAF, and SIEM tools to trace root causes under pressure.
- Autonomous incident owner - demonstrated ability to own complex investigations end to end and make sound escalation calls with minimal oversight.
- Clear technical communicator - able to document findings and explain complex technical incidents in plain language directly to client stakeholders.
- 24x7 rotation performer - willing and able to work a 24x7 rotating shift schedule, including nights, weekends, and holidays as assigned.
- Collaborative shift operator - thrives in fast-paced team environments, backing up colleagues across shift transitions and maintaining operational continuity.
- Active security credentials - hold recognized industry designations such as CompTIA Security+, CySA+, GCIH, or equivalent credentials.
- EDR and SIEM platform mastery - practical experience with EDR tools (CrowdStrike, SentinelOne, Defender) and SIEM solutions (Splunk, Microsoft Sentinel, Sumo Logic, Wazuh).
- Tooling administration and tuning - experience configuring, maintaining, and tuning security platforms beyond day-to-day alert triage.
- SOAR and automation scripting - proficiency writing Python or PowerShell scripts and developing SOAR playbooks to automate triage workflows.
- MSSP environment background - prior experience in managed security service provider environments supporting multiple client organizations concurrently.
- Compliance framework familiarity - awareness of how SOC 2, ISO 27001, and HIPAA requirements align with threat detection and incident response operations.
- Career Development: Clear path with mentorship and training opportunities.
- Role-Related Training: Reimbursement for the successful completion of approved training and certification courses relevant to your current role.
- Competitive Compensation: A competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities.
- Growth Opportunity: Early-stage company with significant room for career advancement.
- Remote-First Culture: Flexibility to work from anywhere while collaborating with a global team, within your assigned shift.
- Excellent written and verbal English communication skills, with the ability to engage confidently with teammates, clients, and stakeholders across global teams.
- A reliable, high-speed internet connection and a professional home office environment that supports confidential conversations, incident calls, and uninterrupted shift coverage.
- Commitment to working your assigned shift within Workstreet's 24x7 SOC rotation, including nights, weekends, and holidays as scheduled. Occasional flexibility to adjust shifts is expected to accommodate coverage needs.
- Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities as needed.
- Candidates must participate in live video interviews throughout the hiring process with camera on (non-negotiable) and be prepared to verify their identity during recruitment and onboarding.
- Employment is contingent upon successful completion of identity verification and background screening, where permitted by law.
- Selected candidates will participate in structured interviews with hiring managers and cross-functional stakeholders to assess role fit, experience, and alignment with Workstreet’s operating principles.
- Candidates will receive prompt updates and consistent communication throughout the interview process, ensuring a transparent, smooth, and engaging experience at every step.
Vacancy posted 11 hours ago
Similar jobs that could be interesting for youBased on the Security Operations Analyst in Philippines vacancy
- ...We’re hiring a Security Analyst Location: APAC - Remote (has to be able to coordinate himself with Spanish team) Salary: depending on experience and skills We are looking for a Security Analyst for a cybersecurity consulting and services company (Barcelona...
- ...reconciliation, improve payment experiences, and create more efficient and secure financial processes. They are committed to innovation and... ...them access world class talent and accelerate growth. With operations across the globe our mission is to make building high...
- ...Sales Operations Analyst Location: Remote, Philippines (collaborating daily with the U.S. team) Employment Type: Full time We are seeking a Sales Operations Analyst to join a fast growing home services contractor that specializes in manufactured homes, with...
- ...Key Responsibilities Monitor Security Information and Event Management (SIEM) dashboards... ...escalate security incidents to senior analysts in accordance with established incident... ...dashboards, compliance documentation, and operational metrics. Support security advisory...
- ...headquartered in Toronto, Ontario, and Minneapolis, Minnesota, with operations across North America, Europe, Middle East, Africa (EMEA), and... .... About The Opportunity As a Lead GCO Operations Analyst, you will serve as a senior analytical resource and project lead...
- ...Troubleshoot and resolve hardware and software issues. Provide technical support to staff and clients. Manage network security and data protection measures. Collaborate on IT projects and implement solutions. Stay updated with emerging technologies...
2000 $
...Role: Supply Chain Operations Analyst Location: Remote | Philippines Schedule: Monday - Friday. 9AM - 5PM EST Salary: Up to $2,000/month USD We are hiring a Supply Chain Operations Analyst to own the physical flow of inventory from our vendors to our prep...- Job Title: Operations Assistant / Analyst Sourcing Location: Philippines Working Hours: 8am-5pm PST or EST Type: Full-Time, Remote Compensation: Market Related About The Role We are seeking a highly detail-oriented and self-sufficient Operations Assistant...
- ...Responsibilities Design, develop, and maintain security and technology platforms, systems, and services ensuring our service capabilities are operating sufficiently. Lead initiatives to develop systems and tools to automate security within our Platform, Cloud...
- ...Merchant Operations Specialist – Software & Security Solutions will be charged with organizing/managing inflow and outflow of information between the company and clients as well as customers in relation to software and antivirus security products. This position goes beyond...
- ~ Gather, analyze, and interpret operational data to identify trends and areas for improvement. Develop reports and dashboards to support... .... ~ Ensure adherence to legal industry regulations, data security standards, and internal firm policies ~ Work closely with attorneys...
- ...Analyst - Investment Operations Onboarding ~202605135 ~Philippines ~Full time Description The Role The Manila Onboarding is under Investment Operations - a team within the Investments line of business. The Manila Onboarding is part of WTW Global...
- ...Lead security engineering. Set the standards. Influence technical decisions. Make a real impact. We're looking for an experienced... ...ensuring security is embedded into the way technology is designed and operated. You'll lead a small team of security engineers, work...
- ...Build Smarter Security Systems. Solve Real Problems. Make an Impact. Do you enjoy working with security technology and solving technical problems? Our client, a leader in enterprise and commercial security solutions, is looking for a Security Systems Programmer...
- ...Fenrir contributors earn per in-band approved task, per qualifying repo, plus referral and milestone bonuses. Required Qualifications Security research / vulnerability discovery experience Comfort with fuzzing, crash triage, and reading C/C++/Rust/Go codebases...
90 $ per hour
...About This Opportunity We're working with a leading foundational AI lab to find experienced security risk analysts who can help train their latest language model on professional document, spreadsheet, and slide deck tasks. We're looking for security risk analysts...- ...finding smarter ways to get things done? We're recruiting a Security Automation Engineer to join an established global technology... ...that reduces manual effort, improves visibility and strengthens operational efficiency. You'll work closely with security,...
- ...take us, and your progression, to the next level. As a SECURITY ENGINEERING TECHNICAL LEAD , you will be responsible for implementing... .... The role will also require you to work with our IT Operations team to ensure our controls are not impacting day-to-day...
- ...Senior Technical Consultant - Risk & Security -ServiceNow (Global role) Role Summary... ...enterprise ServiceNow GRC/IRM and Security Operations solutions. The role translates risk, regulatory... ...leadership to consultants, developers, analysts, administrators and integration...
- ...Retail Media Data Operations Analyst As a Retail Media Data Operations Analyst at Omni Channel Solutions, your role is essential in transforming fragmented reporting from retail media networks, third-party media partners, retailers, and measurement providers into standardized...
- ...The Security Awareness Officer leads the company’s security awareness and behavior-change initiatives, building a culture of cybersecurity across all teams. The role develops engaging content, manages phishing simulations, tracks training compliance, and partners with...
- ...system support, and release management across regional product and operations initiatives Collaborate with business and technical... ...and track post-launch performance, with guidance from senior analysts Assist in testing, validating, and improving analytical workflows...
- ...Description Implement and manage security measures to protect an organization’s computer systems and networks. Monitor network traffic for unusual activity and respond to security breaches. Conduct vulnerability assessments and penetration testing to identify...
- ...Certification requirements = Microsoft Certified: Security Operations Analyst Associate SC200 Working shift - 9:30AM - 6:30PM PHT - Mon-Fri As a member of the RFA Security Operations Center, a SOC Analyst monitors and analyzes the output from various security monitoring...
- ...Company Description The Business Analyst – Digital Operations is responsible for supporting the Underwriting Operations group by performing business processes evaluation and implementing automation,visualization, and data solutions. In addition, the business analyst...
- ...As a Security Engineer Manager you’ll work with clients to identify vulnerabilities, simulate real-world attacks, and strengthen defenses against evolving threats. You’ll lead technical assessments—including penetration tests, red team exercises, and risk assessments—...
- Job Description: Assist in designing and optimising end-to-end Returns & Refunds (RR) policies, processes, and system automations to create a smooth and efficient returns experience across markets. Collaborate with local teams and senior management to align RR strategy...
- Job Description: Perform data analysis to deep dive and uncover gaps in Chatbot in order to improve Chatbot KPIs Perform ad-hoc problem solving Support chatbot solution enhancements Requirements: Currently pursuing a degree in Business, Business Analytics...
- ...aggregated data sets, reports, dashboards) to facilitate development of key metrics to measure efficiency/impact/outcomes of day-to-day operations Work closely with internal stakeholders from cross-functional and product teams across multiple markets to build, test, and...
- ...global boutique specialising in the convergence of identity-driven security and secure networking. We help the world's leading enterprises... .... Our advisory, professional, and managed services teams operate across the UK, US, EMEA and Asia - delivering fast, tangible outcomes...
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Security Operations Analyst. Be the first to apply!
