Security Operations Analyst

🕒 September 25

🇵🇭 Philippines – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

🛡️ Security Operations

👻 Ghost score 42%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Workstreet

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2023

🔒 Cybersecurity

📋 Compliance

🤝 B2B

Cybersecurity • Compliance • B2B

Workstreet is a managed security and compliance services provider that helps businesses automate and modernize their security programs. With expertise in compliance frameworks including SOC 2, ISO 27001, HIPAA, and GDPR, Workstreet supports companies in achieving their security and compliance outcomes efficiently. Their services include acting as a virtual Chief Information Security Officer (vCISO), full-scale penetration testing, and vendor risk management, aiming to streamline security processes while allowing businesses to focus on growth.

📋 Description

• Monitor alerts across EDR, firewall, IPS, WAF, and SIEM platforms in real time • Prioritize alert severity and distinguish true positives under time pressure • Maintain continuous 24x7 threat monitoring through a rotating shift schedule • Conduct deep incident investigations across EDR, network, and cloud log sources • Determine incident root cause, scope, and indicators of compromise • Provide incident analysis and containment recommendations to client teams • Refine SIEM correlation rules and detection logic to eliminate false positives and close security coverage gaps • Document investigation findings and incident timelines in case management systems • Update standard operating runbooks and SOC playbooks • Partner with GRC engineers and vCISOs to align threat detection with client compliance obligations • Execute investigation handoffs across shift rotations • Guide junior analysts on investigative techniques • Partner directly with client stakeholders to maintain strong detection coverage • Ramp into the detection stack and client environments, taking ownership of shift-level monitoring, investigation quality, and escalation judgment within the first 30 days

🎯 Requirements

• 3+ years of hands-on experience monitoring, triaging, and investigating security alerts within a high-velocity SOC setting • Skilled at correlating data across EDR, firewall, IPS, WAF, and SIEM tools • Ability to own complex investigations end to end and make sound escalation calls with minimal oversight • Ability to document findings and explain complex technical incidents in plain language to client stakeholders • Willingness and ability to work a 24x7 rotating shift schedule, including nights, weekends, and holidays • Recognized industry designation such as CompTIA Security+, CySA+, GCIH, or equivalent credentials • Practical experience with EDR tools such as CrowdStrike, SentinelOne, and Defender • Practical experience with SIEM solutions such as Splunk, Microsoft Sentinel, Sumo Logic, and Wazuh • Experience configuring, maintaining, and tuning security platforms beyond day-to-day alert triage • Proficiency writing Python or PowerShell scripts • Experience developing SOAR playbooks to automate triage workflows • Prior experience in managed security service provider environments supporting multiple client organizations concurrently • Awareness of SOC 2, ISO 27001, and HIPAA requirements as they align with threat detection and incident response • Excellent written and verbal English communication skills • Reliable, high-speed internet connection • Professional home office environment supporting confidential conversations, incident calls, and uninterrupted shift coverage • Occasional flexibility to adjust shifts to accommodate coverage needs • Willingness and ability to travel locally for occasional onsite meetings, team gatherings, or business activities • Participation in live video interviews with camera on • Identity verification during recruitment and onboarding • Successful completion of identity verification and background screening, where permitted by law

🏖️ Benefits

• Clear path with mentorship and training opportunities • Reimbursement for successful completion of approved training and certification courses relevant to the current role • Competitive base salary • Regular performance reviews linked to merit-based appraisals • Bonus opportunities • Significant room for career advancement • Remote-first culture with flexibility to work from anywhere while collaborating with a global team, within the assigned shift

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume