{"id":2397931,"url":"https://alion.io/job/pm-consulting-soc-analystincident-response-analyst","title":"SOC Analyst/Incident Response Analyst","company":{"id":4421389,"name":"PM Consulting","domain":"pmconsulting.ph","url":"https://alion.io/company/pmconsulting-2","size_band":"1001-5000","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Manatal","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Manila, Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":8000,"max_usd":23000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":1,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-12T22:49:46Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-26T10:37:49Z","board_verified":true,"closed_at":null,"days_open":13,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":13},"description":"Job Overview\nA growing technology services organization is looking for a SOC Analyst / Incident Response Analyst to support cybersecurity monitoring and incident validation activities during critical off-hour operations, including nights and weekends. This role serves as a first-line defense function responsible for identifying, investigating, and escalating potential security threats across multiple security and identity platforms.\nThe successful candidate will perform initial alert triage, validate suspicious activities, and coordinate escalations to the Incident Response team for confirmed threats.\nKey Responsibilities\nSecurity Monitoring & Alert Validation\nMonitor and review security alerts generated from SIEM, identity management, endpoint protection, password management, and cloud collaboration platforms\nInvestigate alerts related to:\nIdentity and authentication anomalies\nCompromised credentials or password-related incidents\nImpossible travel and restricted-country access events\nPrivileged or administrator account creation activities\nSuspicious account access and administrative actions\nPotential unauthorized access or malicious behavior across enterprise systems\nUtilize ticketing and workflow automation platforms to track, validate, and document alerts\n\nIncident Investigation & Analysis\nConduct manual investigations using security monitoring and log analysis tools\nReview and correlate security logs, endpoint activity, and system events to validate incidents\nDetermine whether security events are false positives or confirmed threats\nReconstruct user and system activity through available logs and telemetry data\nCoordinate with on-call Incident Response personnel during active investigations\n\nIncident Escalation & Documentation\nEscalate validated security incidents to the Incident Response team following established escalation procedures\nPrepare concise handoff summaries including affected users, systems, IP addresses, and relevant investigation findings\nMaintain accurate and detailed documentation within ticketing and incident management systems\nEnsure timely communication and escalation of critical security events\n\nQualifications\nBachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field\nAt least 1-2 years of experience in a SOC, Incident Response, Cybersecurity Operations, or similar technical security role\n\nRequired Skills & Technical Experience\nExperience in security alert triage and incident investigation\nFamiliarity with SIEM tools and log analysis methodologies\nBasic understanding of endpoint detection and response (EDR) platforms\nAbility to investigate suspicious user and system activity using log data\nExperience documenting incidents and communicating findings clearly\nStrong analytical and problem-solving skills\nAbility to work independently during off-hour support windows\n\nPreferred Competencies\nStrong attention to detail and investigative mindset\nAbility to manage multiple alerts and incidents simultaneously\nEffective written communication and incident reporting skills\nComfortable working in a fast-paced security operations environment\nWillingness to work rotating night and weekend schedules as required","description_format":"text","description_chars":3212,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-12T22:49:46Z"}],"visa":[],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.3,"p_room":0.45,"age_days":13,"expected_fill_days":7,"reasons":["conf:3","agency","velocity","win:tail","comp:junior,brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/pm-consulting-soc-analystincident-response-analyst","json_url":"https://alion.io/job/pm-consulting-soc-analystincident-response-analyst.json","meta":{"generated_at":"2026-10-26T11:44:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15967,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4421389},"rest":"https://alion.io/mcp/rest/get_company?id=4421389"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpm-consulting-soc-analystincident-response-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpm-consulting-soc-analystincident-response-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpm-consulting-soc-analystincident-response-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pm-consulting-soc-analystincident-response-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpm-consulting-soc-analystincident-response-analyst"}]}