Security Operations Center Associate

Overview

Security Operations Center Associate Jobs in Quezon City, National Capital Region, Philippines at Land Registration Systems, Inc.

Title: Security Operations Center Associate

Company: Land Registration Systems, Inc.

Location: Quezon City, National Capital Region, Philippines

WORK WITH US!

You will be immersed in a culture of high performance and ensure your learning curve is always accelerated and thus be cut above your peers! Projects assigned to you will have a significant impact on our national government initiatives. We only select those with high potential and the best talent.

JOB SUMMARY

The SOC Associate will serve as the first line of defense in protecting LARES and LRA’s critical infrastructure and data. He/She will be responsible for monitoring security environments, triaging real-time alerts, and conducting initial investigations into potential threats.

JOB RESPONSIBILITIES

1. Perform initial triage of security alerts to filter out false positives and provide context for escalated incidents.
2. Be part of a Security Operations Center Unit that operates 24×7.
3. Uses and configures information security tools and technologies such as but not limited to Endpoint Protection System (“EPS”), Security Incident and Event Management System (“SIEM”), Transport Encryption, Data Encryption, IP Tables, Host/Network Firewalls, Security Groups and, Network Access Control List (“NACL”) to protect the company’s IT Assets.
4. Analyzes dashboards to monitor and detect attacks and threats to IT Assets in both cloud and on-premises environments.
5. Reads and analyzes security, event, application, or error logs to come up with a post-incident report related to information security.
6. Adheres to Playbooks of each type of information security incident.
7. Assists the Information Security Analyst and other members of the Information Technology Department to analyze and provide remediation to Information Security-related incidents.
8. Reports any deviation or violation of the Information Security Policies and Procedures to the Information Security Analyst.
9. Adheres to the guidelines for monitoring and notification of information security threats and attacks in all IT environments being managed by LARES, be it on-premises, cloud-based, or hybrid.
10. Continuously keep abreast of new information security standards.

JOB QUALIFICATIONS

1. Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field (relevant Associate degrees or intensive Bootcamps also considered).
2. Demonstrated practical experience through platforms like TryHackMe, Hack The Box, or home-lab environments (e.g., setting up a personal SIEM or virtualized attack/defense scenarios).
3. One or more of the following preferred certifications: CCNA, BTL1, Cisco Certified CyberOps, and ISC2 CC, CySA+, Security+.
4. Prior experience (6 months – 1 year) in a Security Operations Center (SOC) or Managed Security Service Provider (MSSP) environment is highly desirable.
5. 1–3 years of experience in an IT technical role, such as Help Desk (Tier 2/3), System Administration, or Network Engineering.
6. Deep functional knowledge of Windows and Linux environments, including command-line proficiency and system internals.
7. Basic experience monitoring and triaging alerts within SIEM platforms (e.g., ArcSight, Splunk, Microsoft Sentinel, or IBM QRadar).
8. A solid foundational understanding of Cloud Security principles and the MITRE ATT&CK® framework to map and analyze adversary behavior.
9. Practical knowledge of common Information Security tools, including EDR, IDS/IPS, and packet analyzers (e.g., Wireshark).
10. Preferred experience with Relational Database Management Systems (RDBMS) to assist in log analysis and data correlation. (e.g., MS SQL Server, Sybase, PostgreSQL)
11. Preferred familiarity with Vulnerability Assessment methodologies and tools (e.g., Nessus, Qualys, or OpenVAS) to identify and prioritize system weaknesses.
12. Exceptional attention to detail with a proven ability to identify anomalies within complex datasets.
13. A self-starter capable of rapidly upskilling on emerging threats and new security technologies.
14. A natural "problem-solver" mindset with the drive to dig deeper into the "why" behind security events.