Treantly is a Canadian-based recruitment agency that facilitates the connection between businesses in North America and exceptional remote staff in the Philippines.  Job Summary: We are seeking a highly skilled Senior SOC Analyst (L3) to join our cybersecurity team. As an L3 Analyst, you will be responsible for leading advanced threat detection, incident response, and security operations. You will serve as the escalation point for complex security incidents, mentor junior analysts, and develop security strategies to enhance our organization’s security posture. Key Responsibilities: - Act as the final escalation point for security incidents, conducting deep-dive investigations and forensic analysis. - Develop, implement, and enhance security monitoring and threat-hunting processes. - Lead incident response efforts, including containment, eradication, and recovery from security breaches. - Conduct threat intelligence analysis and proactively identify emerging security threats. - Tune and optimize security tools such as SIEM, IDS/IPS, endpoint protection, and vulnerability management solutions. - Collaborate with internal teams and external vendors to improve security architecture and processes. - Provide guidance and mentorship to L1 and L2 SOC analysts. - Develop and maintain security policies, playbooks, and incident response procedures. - Ensure compliance with industry regulations and security best practices. - Conduct red teaming exercises and penetration testing simulations.

Treantly is a Canadian-based recruitment agency that facilitates the connection between businesses in North America and exceptional remote staff in the Philippines.  Job Summary: We are seeking a highly skilled Senior SOC Analyst (L3) to join our cybersecurity team. As an L3 Analyst, you will be responsible for leading advanced threat detection, incident response, and security operations. You will serve as the escalation point for complex security incidents, mentor junior analysts, and develop security strategies to enhance our organization’s security posture. Key Responsibilities: - Act as the final escalation point for security incidents, conducting deep-dive investigations and forensic analysis. - Develop, implement, and enhance security monitoring and threat-hunting processes. - Lead incident response efforts, including containment, eradication, and recovery from security breaches. - Conduct threat intelligence analysis and proactively identify emerging security threats. - Tune and optimize security tools such as SIEM, IDS/IPS, endpoint protection, and vulnerability management solutions. - Collaborate with internal teams and external vendors to improve security architecture and processes. - Provide guidance and mentorship to L1 and L2 SOC analysts. - Develop and maintain security policies, playbooks, and incident response procedures. - Ensure compliance with industry regulations and security best practices. - Conduct red teaming exercises and penetration testing simulations.

• Maintain and update information security policies, standards, and procedures in alignment with modern cybersecurity frameworks and regulatory requirements, including GovRAMP, FedRAMP, ISO 27001, PCI DSS, and SOC 2. • Maintain System Security Plans (SSPs) to ensure system boundaries, control implementations, and control inheritance accurately reflect the current state of production systems. • Coordinate and manage internal and external compliance assessment activities, including audit planning, audit fieldwork coordination, evidence collection and preservation, and support of audit responses. • Manage continuous monitoring activities, including tracking, updating, and reporting Plan of Actions and Milestones (POA&Ms) to support risk remediation and security posture communication. • Support risk assessments and control gap analyses by identifying security and compliance deficiencies and collaborating with stakeholders to define remediation approaches. • Define, track, and report key compliance metrics to measure program effectiveness and communicate compliance posture to leadership and governance committees. • Partner closely with engineering, operations, and production teams to ensure security requirements are documented, implemented consistently, and remain audit-ready across systems. • Develop and maintain audit-ready evidence repositories to support repeatable, efficient compliance assessments and reduce audit cycle time. • Provide guidance to system owners and control owners on compliance expectations, documentation standards, and control implementation requirements.

• Monitor security alerts, incidents, and threats across DoiT's global infrastructure • Conduct security assessments and vulnerability scans for cloud environments and applications • Investigate and respond to security incidents, coordinating with relevant teams for remediation • Maintain and update security documentation, playbooks, and incident response procedures • Support compliance efforts including SOC2, ISO 27001, and customer security assessments • Assist with security awareness training and education initiatives across the organization • Implement and maintain security controls across AWS, Google Cloud, and Microsoft Azure environments • Configure and monitor cloud security tools including SIEM, CASB, and vulnerability scanners • Review cloud architecture designs and provide security recommendations • Support secure configuration management and infrastructure as code practices • Monitor cloud access patterns and investigate anomalous activities • Assist with security policy development and implementation • Support vendor security assessments and due diligence processes • Maintain security metrics and reporting for leadership and compliance requirements • Participate in security audits and provide evidence for compliance frameworks • Help develop and test business continuity and disaster recovery plans • Work closely with IT Operations team on security-related projects and initiatives • Provide security guidance to development and engineering teams • Support procurement processes by reviewing security requirements for new tools and services • Collaborate with external security consultants and penetration testing teams • Participate in cross-functional incident response and crisis management activities