{"id":3009996,"url":"https://alion.io/job/expereo-junior-soc-analyst-shift-work","title":"Junior SOC Analyst (Shift work)","company":{"id":674165,"name":"Expereo","domain":"expereo.com","url":"https://alion.io/company/expereo","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Taguig, Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":9500,"max_usd":27000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Crowdstrike","optional":false},{"name":"Elastic SIEM","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"AWS","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-21T15:09:20Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-27T02:36:20Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"We are the Intelligent Internet Platform. We connect People, Places and Things anywhere, managing Internet Performance better than anyone else, while providing One Global Experience, giving Visibility, Control and Security through expereoOne.\nExpereo believes in the power of Internet connectivity. As the world's largest provider of managed internet, SD-WAN/SASE, and Cloud connectivity solutions, we power enterprises and government sites worldwide, helping to enhance every business' productivity with flexible and optimal Internet performance.\nAs a trusted partner of Fortune 500 enterprises, our continued aim and success in helping our customers and partners depends solely on the talented individuals who make Expereo a dynamic, effective, multicultural, and equitable environment.\nAbout the role\nWe are looking for a motivated Level 1 SOC Analyst with one or two years experience in a security operations or similar technical role to join our Security team. You will be monitoring and triaging security alerts, carrying out initial investigation, and escalating confirmed or suspicious activity in line with established playbooks. You will work closely with senior security team members.\nResponsibilities\nMonitor security alerts across SIEM, endpoint detection and email security platforms, and carry out initial triage and classification as benign, false positive, suspicious or confirmed incident. \nPerform initial investigation: gather evidence, correlate activity across endpoint, identity, email and network telemetry, and establish whether an alert represents genuine malicious activity. \nInvestigate reported and quarantined email, analyze message headers, sender reputation, embedded links and attachments and action or escalate accordingly. \nExecute approved response playbooks for routine cases, and escalate indicators of compromise, lateral movement or data exposure to senior analysts with clear supporting evidence. \nDocument each cases: what was observed, the evidence gathered, the assessment reached and the action taken. \nTrack open cases through to closure and ensure alerts are handled. \nSupport security hygiene activity, including monitoring of security tooling coverage and follow-up on devices falling outside policy. \nContribute to triage procedures, runbooks and operational reporting, and support awareness activities such as phishing simulation campaigns. \nRequirements\nEssential Skills and Experience\nPractical experience operating a SIEM in a Level 1 capacity, alert queue management, triage, classification and escalation. \nHands-on exposure to enterprise security platforms, such as Microsoft Defender, Elastic Security, Microsoft Sentinel, Splunk or CrowdStrike. \nAbility to search and interpret log data, and to draw conclusions from incomplete information. \nUnderstanding common attack techniques such as phishing, credential theft, malware delivery and social engineering. \nEmail security fundamentals, including message headers and sender authentication (SPF, DKIM, DMARC). \nNetworking, Windows and Linux fundamentals sufficient to interpret host and network telemetry. \nClear written English for case documentation and escalation. \nMethodical and consistent under repetitive workload, with sound judgement on when to escalate rather than proceed. \nDesirable\nExposure to cloud security monitoring, particularly within Microsoft Defender and a plus (AWS environments). \nQuery language knowledge in KQL, Lucene, EQL, or equivalent. \nFamiliarity with the MITRE ATT&CK framework. \nExperience with endpoint management or device compliance platforms. \nEntry-level certification such as SC-200, CompTIA Security+, CompTIA Network+ Blue Team Level 1. \nBasic scripting knowledge (PowerShell, Python). \nBenefits\nBeyond the Job\nWe’re proud of our focus on Environment, Social and Governance as well as the passion we display for the communities where we live and work.\nEEO (Equal Employments Opportunities) Statement:\nExpereo is an Equal Opportunities employer who aims to support and celebrate every employee that comes through our doors. We respect and support all of our people regardless of background, religion, nationality, sexual orientation, age, or physical condition.","description_format":"text","description_chars":4211,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Cybersecurity","Telecommunications","Network Security"],"lifecycle":[{"event":"open","at":"2026-10-21T15:09:20Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":34,"reasons":["conf:2","velocity","win:early","comp:junior"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/expereo-junior-soc-analyst-shift-work","json_url":"https://alion.io/job/expereo-junior-soc-analyst-shift-work.json","meta":{"generated_at":"2026-10-27T04:21:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3886,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":674165},"rest":"https://alion.io/mcp/rest/get_company?id=674165"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fexpereo-junior-soc-analyst-shift-work"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fexpereo-junior-soc-analyst-shift-work"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fexpereo-junior-soc-analyst-shift-work"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/expereo-junior-soc-analyst-shift-work\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fexpereo-junior-soc-analyst-shift-work"}]}