SOC Security Analyst L2
Full-time
BlueVoyant
Position: SOC Security Analyst L2 Reports To: SOC Team Lead / SOC Manager Department: Security Operations Center (SOC) Location: Hybrid, Manilla (Philippines) Shift Schedule: Sunday–Wednesday or Wednesday–Saturday, 7:00am–5:00pm Work Authorization: Philippine Citizenship Required BlueVoyant is seeking a SOC Security Analyst L2 to join our Security Operations Center, defending our global customers against constant and evolving adversary activity. In this role you will own and work through a queue of security alerts and tickets, carrying out thorough investigations, resolving cases accurately and efficiently, and escalating confirmed or complex incidents to L3 analysts with clear, well-documented findings. You will work closely with senior analysts and clients to reduce the impact and dwell time of security incidents. This role reports into BlueVoyant SOC leadership and operates under BlueVoyant processes, tooling, and supervision at all times, including when working within client environments. What You'll Do:
- Monitor, triage, and investigate security alerts and tickets from multiple sources, including SIEM logs, endpoint logs, and EDR telemetry.
- Own assigned tickets through to resolution, working within defined SLAs and prioritizing by severity and client impact.
- Research indicators and activities to determine reputation and suspicious attributes.
- Perform analysis of suspicious files, emails, URLs, and attacker infrastructure to support investigations.
- Determine whether activity is malicious, benign, or a false positive, and escalate confirmed or complex incidents to L3 analysts with clear supporting evidence.
- Document investigation steps, findings, and recommended actions accurately within the ticketing and case management system.
- Take initial response actions in line with runbooks and client-approved procedures, such as isolating endpoints or disabling compromised accounts.
- Communicate with clients to provide ticket updates, request information, and share remediation guidance.
- Identify false-positive or benign detections and recommend tuning improvements.
- Contribute to the improvement of runbooks, procedures, and automation.
- Support and share knowledge with L1 analysts and incorporate feedback from L3 peer review and QA.
- Operate across BlueVoyant-managed systems and client-provided environments in accordance with client-approved access controls, logging, and BlueVoyant operating procedures, maintaining strict separation and adherence to security policies.
- Ability to manage a high-volume ticket queue in a fast-paced environment while maintaining accuracy and attention to detail.
- Strong written and verbal communication skills, with the ability to document findings clearly and explain technical issues in easy-to-understand language.
- Strong teamwork and interpersonal skills, including working effectively within a globally distributed team.
- Ability to work directly with clients to provide updates and gather information.
- Knowledge and experience with SIEM solutions, Cloud App Security tools, and EDR.
- Experience in endpoint, web, email, and authentication log analysis.
- Solid understanding of network protocols and network telemetry.
- Knowledge of common attack techniques, including phishing, business email compromise (BEC), credential harvesting, LOLBin use, and lateral movement.
- Working knowledge of:
- SIEM workflows (preferably Microsoft Sentinel and Splunk)
- Microsoft 365 and Entra ID security alerts and sign-in logs
- Email security and phishing analysis
- Network monitoring metadata (web logs, firewall logs, WAF/IDS)
- Windows and Unix operating system fundamentals and common forensic artifacts
- Ticketing and case management systems
- Ability to successfully complete a background check and any client-required security vetting.
- 3+ years of hands-on SOC/TOC/NOC experience.
- Experience in an MSSP/MSP environment supporting multiple clients.
- Basic malware analysis or sandboxing experience.
- Experience writing SIEM queries (KQL or SPL).
- Familiarity with Microsoft Sentinel, Splunk, Microsoft Defender suite, CrowdStrike Falcon, and SentinelOne.
- Understanding of a scripting language such as Python or PowerShell.
- Relevant certifications such as: Security+, CySA+, Network+, GIAC (e.g. GSEC, GCIH), Microsoft SC-200, CEH
- Bachelor's degree in Information Security, Computer Science, or another IT-related field, or equivalent professional experience.
- Investigate real-world threats across a diverse global client base, building hands-on experience with leading Microsoft Security, SIEM, and EDR technologies.
- Develop your skills alongside senior L3 analysts and incident responders, with clear opportunities to grow toward advanced investigation and response.
- Join a global, mission-driven cybersecurity company defending organizations worldwide with cutting-edge data, technology, and expertise.
- Competitive compensation and a comprehensive benefits package, with support for wellbeing, development, and career growth.
Vacancy posted 1 day ago
Similar jobs that could be interesting for youBased on the SOC Security Analyst L2 in Manila vacancy
- ...Position: SOC Security Analyst L3 Reports To: SOC Team Lead / SOC Manager Department: Security Operations Center (SOC) Location: Hybrid, Manilla (Philippines) Shift Schedule: Sunday–Wednesday or Wednesday–Saturday, 7:00am–5:00pm Work Authorization: Philippine...
- ...digital assets. This role works under close supervision to monitor security alerts, assist with vulnerability scanning, and respond to... ...as conducting vulnerability audits and assessments. The SOC Analyst is expected to be fully aware of the enterprise's security goals...
- ...with you? If you are already operating at Level 2 in network security and want greater flexibility, structured progression, and deeper... ...across leading security platforms Clear progression pathway from L2 to L3 with mentorship and upskilling Hands-on work with...
- ...Cato Networks is the converged network and security cloud for the AI era. As AI reshapes cybersecurity, enterprises face a dual... ...holidays) ~1-2 years in Networking Security roles, as a T1/T2 analyst in SOC (Security Operation Center) ~ Advantage – experience working...
- ...IT Consulting Services company with headquarters in Singapore and two delivery centers in the Philippines. We’re Hiring: Security Analyst We are looking for a detail-oriented and analytical Security Analyst II to support information security audits, risk assessments...
- ...investigations to uncover hidden adversaries, mitigate risks, and enhance SOC capabilities. Key Responsibilities: Develop and test... ...of MITRE ATT&CK framework, and understanding of cloud/network security. In order to be considered for a position at Kroll, you...
- ...Design and implement security protocols and systems to protect company networks, systems, and data. Perform vulnerability assessments, risk assessments, and penetration tests to identify potential security issues. Monitor and analyze security events to detect potential...
- ...heard, valued, and empowered. If you like what we're saying, keep reading! WHY THIS ROLE IS IMPORTANT TO US The Operations Analyst in the Investment Operations team at SimCorp is responsible for supporting the operational processes related to investment activities...
- ...Position: IT Analyst Agency Company: Argold Jobs Inc. Deployment Area: Sheridan St., Mandaluyong City Work Set-up: Hybrid... ...issues. Assist in ensuring compliance with IT policies, data security, and regulatory standards . Qualifications Bachelor’s...
- ...endless possibilities with Cambridge University Press & Assessment, a distinguished global academic publisher and assessment organization proudly affiliated with the prestigious University of Cambridge. We are seeking an experienced Senior Security Analyst to join...
- ...Location: Cebu / Manila Hybrid role, Happy to talk flexible working The opportunity Join QBE as a Cyber Security Governance Analyst and help strengthen the governance of Shadow IT and business-managed technology. You’ll collaborate across business, technology...
- ...We are looking for an experienced and motivated Cyber Security Engineer specializing in SIEM (Security Information and Event... ...You will work closely with the Security Operations Center (SOC) team, threat analysts, and IT stakeholders to enhance threat detection and automate...
- ...Intuition Machines uses AI/ML to build enterprise security products. We apply our research to systems that serve hundreds of millions... ...small teams, and rapid iteration. As a Senior Cyber Security Analyst, you will leverage your expertise in bot detection, web traffic...
- ...not just adapt to change – we drive it. Our Summer Technology Analyst Program is where forward thinking talents meet unparalleled opportunities... ...strategic operational plans. Essentially, Chief Information Security Office (CISO) works together to ensure the safety of Citi’s and...
- ...advantage. JOB RESPONSIBILITIES Escalated IT support (L2) Own escalated tickets from L1 for desktops, laptops,... ...common GPOs impacting users and workstations (drive mappings, basic security/settings). Common L2 server tasks: basic server...
- • Assist in prioritization of IT projects as part of the business planning / demand planning cycle for the Units • Align with the project manager on the overall business outcomes for the modules and delivery timelines • Monitor and execute assigned projects as per SDLC...
- ...Summary : As a Security Managed Services Practitioner, a typical day involves overseeing and delivering comprehensive security services tailored to client environments. This role requires continuous monitoring and management to uphold protection standards, ensure...
- ...AEST QLD) Employment Type: Full-time Ready to do work that actually excites you? Our client is looking for an experienced L2/L3 Helpdesk Support Engineer to join their managed services team. This role sits at the technical core of our service desk, resolving...
- ...Summary SECURITY ARCHITECT Job Summary The Security Architect is responsible for designing, implementing, and governing the Bank’s security architecture to protect infrastructure, systems, and information assets from internal and external threats. The role ensures...
- ...Growing together. The Manager, PH Country Security Operations Center (CSOC) is a member of... ...include management and oversight of CSOC analysts and operational staff, security incident... ...enterprise security operations or SOC environments, managing workplace security...
- An Oracle Fusion SCM (Supply Chain Management) Functional Consultant is responsible for the analysis, design, configuration, and support of Oracle Fusion Supply Chain Management solutions to meet the business needs of an organization. The consultant typically works in ...
- ...Often related to safety and security, including "Safety Marshal," "Security Marshal," and "Mall Marshal." These roles require ensuring safety, monitoring premises, and checking compliance, with opportunities in various sectors like construction, events, malls, and manufacturing...
- ...assessments, and report development. Risk Assessment and IT Security: Conduct walk-throughs to identify risks and controls. Collaborate... ...or working experience with various compliance frameworks and regulations like HITRUST, ISO 27001, SOC 2 Type II, PCI DSS, NIST,...
- ...Are you passionate about helping organizations strengthen their security, compliance, and identity capabilities in a rapidly evolving threat landscape? Do you enjoy combining technical expertise with customer engagement to deliver meaningful cybersecurity outcomes?...
- ...SUMMARY As a Security Engineer , you will be responsible for provisioning, managing, and ensuring optimal operation of company managed solutions, including but not limited to endpoint protection, vulnerability management, and firewall solutions. This position will...
- ...Philippines** **About the Role** Wolfpack ITS is seeking an experienced **Microsoft Engineer** specializing in **Microsoft 365 security, identity management, endpoint protection, and Windows device management**. You’ll assess Microsoft 365 tenants and Windows endpoints...
- ...everyone, with a focus on addressing those faced by underrepresented groups. About The Role We're looking for a Senior Cyber Security Engineer to help mature application and cloud security across the FT's cloud-native, AWS-hosted technology estate. This role has...
- ...About The Job Systems Analyst We are seeking a detail-oriented and proactive Systems Analyst to join our growing team. This role... ...Performance Monitoring: Track system performance, capacity, and security, recommending proactive optimizations. Issue Resolution: Troubleshoot...
- ...Position: AI SECURITY EXPERT Salary rang e: up to ₱150,000 Philippine Peso (with the final offer subject to the client’s discretion based on the candidate’s experience) Working Hours: AU/NZ business hours Work set-up: 100% Remote work Holidays : New...
- ...Network Security Engineer I We are seeking a highly skilled and motivated Firewall Administrator to join our Infrastructure and Network teams. This role is responsible for the design, implementation, administration, monitoring, and continuous improvement of enterprise...
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to SOC Security Analyst L2. Be the first to apply!
