SOC Analyst

About DysrupIT

DysrupIT is a consulting-led technology firm. We help mid-market to enterprise businesses solve business problems through technology, whether that’s consulting, execution, managed services, or staff augmentation, we take accountability for the outcome. We are dedicated to making a positive impact in the communities we serve.

Company Culture

At DysrupIT, success isn’t measured in headcount placed or hours billed, it’s measured in outcomes delivered. We’re a team that takes ownership of the work, stays curious about problems beyond our immediate scope, and builds relationships meant to grow, not just renew or end. We invest in our people with the training and support they need to grow their careers, and we back a culture where everyone, regardless of role, is encouraged to notice opportunities, ask one more question, and help lead the story for our clients, not just deliver it.

Job Summary

We are looking for a SOC Analyst to join our client’s Security Operations Center (SOC) as part of a Managed Security Services team. This is a customer-facing role that combines support and security monitoring. You will be the first point of contact for customers, handle and track support tickets through to resolution, monitor and triage security alerts, and escalate issues to Lead Analysts and Engineering when needed. This role suits someone with a strong IT helpdesk or service desk background who also has some hands-on cybersecurity experience.

• Location: Philippines
• Work setup: Fully remote
• Work schedule: Graveyard shift (Philippine Time), with on-call support when needed

Job Responsibilities

Customer support

• Act as the first point of contact for SOC customers, taking ownership of support requests and incidents and tracking them through to resolution.
• Provide Tier 1 triage and remote support by following established processes and runbooks.
• Log, update and manage tickets accurately in the ticketing system, keeping customers informed at each step.
• Support appliance management tasks such as health checks, basic configuration and routine maintenance.
• Help onboard new Managed Security Services clients as needed.
• Provide other administrative support for customers as needed.

Security monitoring

• Monitor and analyse security alerts and logs to spot suspicious activity.
• Carry out initial investigation of potential threats, such as malware alerts, suspicious logins or intrusion attempts.
• Escalate confirmed or complex incidents to Lead Analysts or Engineering with clear notes and supporting evidence.
• Support incident response activities under the direction of senior analysts.

Qualifications

• Excellent written and spoken English.
• College degree or equivalent work experience.
• 5+ years of experience in IT helpdesk, service desk, technical support or a similar customer-facing IT role.
• At least 2 years of hands-on cybersecurity experience, such as alert monitoring, endpoint protection, log review or incident handling.
• Hands-on experience with at least one security tool, such as CrowdStrike or another EDR platform, or a SIEM tool.
• Basic knowledge of security areas such as log collection, network traffic analysis, malware response or incident response.
  
• Hands-on experience with ticketing systems such as ServiceNow, Remedy, ConnectWise or Zendesk.
• Solid troubleshooting skills across Windows, networking and common business applications.
• Good understanding of network concepts such as TCP/IP, DNS, firewalls and VPNs.
• Strong customer service skills, with the ability to stay calm and clear when handling urgent issues.
• Good time management, documentation and reporting skills.
• Comfortable working a graveyard shift (Philippine Time), with flexibility to provide on-call support when needed.
• Eligibility to obtain security clearance if required by the client.

Nice to Have

• Previous experience in a SOC, Managed Security Services or managed service provider (MSP) environment.
• Experience with SIEM configuration and management, or user behaviour monitoring.
• Experience analysing security log data from multiple sources.
• Familiarity with server applications and services such as Active Directory, Exchange, DNS, SMTP, SharePoint, IIS, SQL or patch management.
• Security certifications such as CompTIA Security+, CySA+, CEH or Cisco Security.
• Basic scripting skills (such as PowerShell or Python) for automating tasks.

What We Offer

• Competitive compensation package commensurate with experience.
• Government-mandated benefits plus supplemental HMO coverage.
• Collaborative and professional work environment.
• Career growth opportunities within a growing organization.
• Fully remote work arrangement.