{"id":1219843,"url":"https://alion.io/job/citco-it-senior-soc-analyst","title":"IT.Senior SOC Analyst","company":{"id":1907202,"name":"Citco","domain":"citco.com","url":"https://alion.io/company/citco","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":76,"open_postings":101,"ghost_share":0,"stale_share":0.96,"repost_share":0,"time_to_fill_p50_days":33,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Makati, Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17500,"max_usd":40000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2225},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"STIX","optional":false},{"name":"TAXII","optional":false},{"name":"Windows","optional":false},{"name":"Wireshark","optional":false}],"status":"live","first_seen_at":"2026-07-17T08:36:30Z","employer_posted_date":"2026-07-17","last_verified_at":"2026-10-23T23:07:58Z","board_verified":true,"closed_at":null,"days_open":98,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":97},"description":"Senior SOC Analyst\nMakati - Hybrid Set-Up\nFlexible Shift\nPOSITION DESCRIPTION:\n\nThis position calls for a Senior SOC Analyst with proven expertise in cybersecurity monitoring, threat detection, and incident response across complex enterprise environments. As a key member of Citco’s Computer Security Incident Response Team (CSIRT), the Senior SOC Analyst is responsible for leading the analysis of security events, proactively identifying and mitigating threats, and mentoring junior analysts within a 24x7x365 SOC environment.\nThe Senior SOC Analyst is expected to be highly proficient with modern security technologies and have deep knowledge of adversary tactics, techniques, and procedures (TTPs). This role requires experience working across hybrid-cloud environments, supporting incident handling lifecycle from detection through containment, eradication, and recovery.\nORGANIZATIONAL RELATIONS:\n\nThis position is part of the IT Security group, which oversees global cybersecurity at Citco and supports incident handling and detection initiatives across business units and platforms.\nPRINCIPAL ACCOUNTABILITIES:\n\nServe as an escalation point for complex or high-risk security incidents.\nLead end-to-end investigations involving malware, APTs, lateral movement, and insider threats.\nConduct proactive threat hunting across on-prem and cloud environments using SIEM, EDR, and threat intelligence tools.\nAnalyze logs, security telemetry, and packet captures across Windows, Linux, and network infrastructure.\nEnhance detection content and use cases by tuning SIEM and EDR rules aligned to frameworks such as MITRE ATT&CK.\nDevelop, test, and maintain SOAR playbooks to improve investigation efficiency and automate response actions.\nContribute to post-incident reviews and root cause analyses, proposing hardening and lessons learned initiatives.\nConduct periodic evaluations of alert fidelity, detection coverage, and SOC operational metrics.\nCollaborate with IT, Engineering, and DevSecOps teams to validate threat findings, coordinate remediation, and improve preventative defenses.\nLead knowledge transfer sessions and create training material for Junior SOC analysts.\nAssist the SOC Manager in evaluating security tools and recommending operational improvements.\nMaintain accurate and detailed documentation in the SOC’s case management system.\nStay current on emerging threats, adversary TTPs, and detection techniques.\nEDUCATION, EXPERIENCE & SKILLS:\n\n3-5+ years of experience in a 24x7 SOC, CSIRT, or cyber incident response role in a global enterprise.\nDeep knowledge of SIEM, EDR and SOAR platforms and security automation tools.\nFamiliarity with threat intelligence standards (e.g., STIX/TAXII) and frameworks like MITRE ATT&CK.\nStrong hands-on experience with forensic tools and utilities (e.g., Sysinternals, Wireshark).\nProficient in scripting and automation (e.g., PowerShell, Python).\nExcellent verbal and written communication skills, especially for documentation, briefings, and reporting.\nCritical thinking and problem-solving skills with a high attention to detail.\nComfortable working independently or collaboratively under pressure.\nPreferred certifications: GCIH, GCIA, CEH, CySA+, or equivalent.\nWillingness to work flexible hours including weekends, holidays, and on-call as needed.\nWHAT WE OFFER\n\nWe offer a challenging job in a growing international company, an opportunity to expand your business knowledge by working with prestigious clients and complex financial and technological instruments, and a friendly and fast-paced environment. Additionally, Citco is proud to offer our employees competitive compensation, vacation and health insurance benefits.\nFind out more about us! www.citco.com","description_format":"text","description_chars":3725,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Custody & Fund Administration"],"lifecycle":[{"event":"open","at":"2026-09-25T11:41:52Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.4,"p_room":0.28,"age_days":97,"expected_fill_days":33,"reasons":["conf:4","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/citco-it-senior-soc-analyst","json_url":"https://alion.io/job/citco-it-senior-soc-analyst.json","meta":{"generated_at":"2026-10-24T03:37:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5693,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1907202},"rest":"https://alion.io/mcp/rest/get_company?id=1907202"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcitco-it-senior-soc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcitco-it-senior-soc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcitco-it-senior-soc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/citco-it-senior-soc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcitco-it-senior-soc-analyst"}]}