threat monitoring AnalystIbm

Introduction
We have an excellent opportunity for a SIEM Threat Triage Analyst to support strategic clients across
the region to drive strategy around various security consulting initiatives. This is an opportunity to work
with IBM security services team that is operating on the cutting-edge of information security.
Your Role and Responsibilities
The SOC Threat Monitoring Analyst role is part of the SOC. Candidates in this role will monitor computer security events according to documented procedures and industry best practices and are the first line of defense in protecting the information systems from internal and external threats. Ideal candidates should be experienced in the areas of networking, client/server technologies, and analyzing log files. Candidates must have strong multitasking capabilities and be able to evaluate threats, vulnerabilities, and risk while under pressure. Candidates must display enthusiasm and interest in Information Security.
APAC_Security
Required Technical and Professional Expertise
Knowledge of network security zones, firewall, IDS
Ability to contextualize data from multiple SIEM tools
Preference for candidates with hands-on system administration experience
Knowledge of log formats for syslog, http logs, DB logs and how to gather forensics for traceability back to event
Knowledge of packet capture and analysis
Experience with log management or security information management tools
Ability to make information security risk determinations
Effective verbal and written communication skills
Preferred Technical and Professional Expertise
Preferred
Security Essentials - SEC401 (GSEC certification) or equivalent
Recommended
Advanced Security Essentials - SEC501 (optional GCED certification)
Advanced digital forensics and Incident Response - FOR 508 (Optional GCFA certification)
Hacker Techniques, Exploits & Incident Handling - SEC504 (optional GCIH certification)
IBM

Quezon City, Metro Manila
Permanent
Full-time