Showing the world a better way to outsource.
Security Operations Center Analyst I
Location
Philippines
Posted
8 days ago
Salary
0
Seniority
Junior
Job Description
Security Operations Center Analyst I
SupportNinja
• Continuously monitoring the alert queue for multiple clients, from small business to large organizations using multiple tools, such as IDS, SIEM and SOAR. • Conducting initial triage and investigation of alerts to identify potential true positives, false positives, policy violations, and compromises. • Escalating problematic alerts for client review and validation via email or phone. • Performing basic threat hunting activities against customer networks. • Assist with writing customer facing reports: Threat report, Advisories or Vulnerabilities. • Interfacing with customers to remediate security issues. • Meeting timely Service Level Agreements (SLAs) for the full alert and case life cycle.
Job Requirements
- 1 to 2 years of related professional experience or training in information technology and/or information security is required.
- Exposure to a multitude of security tools (SIEM, IDS, AV, etc.).
- Experience in Help Desk, Incident Response, Threat Hunting, and/or Threat Intelligence is preferred.
- Holding or working toward an industry standard network and/or security certification is preferred but not required.
- Amenable to work on Weekends and Night shift or any other days and shift as required by the client.
- Basic understanding of Linux and Windows operating systems.
Benefits
- Competitive compensation
- Adherence to government-mandated benefits
- Retirement Savings Program with Company Matching
- Life Insurance
- HMO on day 1
- Paid time off, birthday leave
- Bonus and incentive plans
- Opportunities for skills training and personal and professional development
- Employee Referral Program
Related Guides
Related Categories
Related Job Pages
More Security Operations Jobs
• Deliverable 1: Mock-up of COMS NR/NS environment on the NATO Software Factory • Deliverable 2: Identification and documentation of the COMS requirements • Deliverable 3: Creation of a video demonstrating the identified requirements in D2 • Deliverable 4: Demonstration of the COMS mock-up environment
• Develop secure systems to protect Lido Protocol, DAO, applications, contributors, partners, and stakers. • Define processes, systems, and applications to make attacks difficult to execute and easy to detect. • Embed security practices and tools within the development pipeline. • Develop and maintain incident response plans and playbooks. • Perform regular vulnerability assessments and penetration testing. • Lead or participate in incident response activities, including investigation, containment, eradication, and recovery. • Monitor security alerts and incidents to identify and respond to threats promptly. • Collaborate with development and operations teams to ensure security is incorporated from design to deployment and maintenance. • Provide training and support on security tools and techniques, emphasizing soft skills like communication, negotiation, and influence.
Title: IR / SOC Manager (Security Engineering) Location: Vancouver, British Columbia Type: Full-time Workplace: hybrid Category: Security Job Description: About the Role As the Manager, IR / SOC, you will lead the integrated team responsible for Detection Engineering, Security Operations Center (SOC), and Incident Response (IR) across Match Group. Reporting to the Sr. Director of Security Engineering, you will drive the strategic vision of maximizing rapid and accurate threat response capabilities by integrating these three core functions and leveraging AI-driven innovation. You will own the detection lifecycle end-to-end — from signal engineering and alert tuning through triage, investigation, and incident resolution — while building toward an AI-augmented SOC model that reduces noise, accelerates response, and scales across a global portfolio. What You'll Do - Lead and develop a high-performing team of SOC analysts, detection engineers, and incident responders operating across multiple time zones with 24/7 coverage - Play a key role in developing the detection engineering framework, contributing to detections-as-code (DaC) via GitOps/CI/CD pipelines for consistency and automated deployment - Drive AI Agentic SOC adoption — evaluate, select, and implement AI-driven triage and investigation tooling to maximize SOC efficiency, reduce false positives, and accelerate initial response speed - Manage the full incident lifecycle — from detection through containment, eradication, recovery, and lessons learned — partnering with Legal, Communications, Privacy, and Engineering teams - Build and refine detection content across the SIEM platform, integrating log sources across all MG brands (Tinder, Hinge, Match, E&E, HPCNT, Eureka, and New Bets) - Establish and track SOC metrics and SLAs, creating dashboards to visualize performance, alert fidelity, and response effectiveness - Coordinate and execute IR tabletop exercises (technical and management-level) across brands to validate readiness and improve playbooks - Partner with the Red Team to validate detection capabilities through adversary simulation and assumed-compromise testing - Collaborate with Platform Security, InfraSec, and AppSec teams to identify and close detection gaps across cloud-native and hybrid environments (AWS, GCP), datacenter infrastructure, endpoints (CrowdStrike), identity (Okta), SaaS, and application layers - Integrate threat intelligence into detection and response workflows to anticipate and proactively defend against emerging threats - Use automation to improve detection and response times and mitigate incident impact What You'll Bring - 5+ years of experience in security operations, incident response, detection engineering, or threat hunting, with 2+ years in a team leadership or management role - Proven experience building and operating a modern SOC in cloud-native and hybrid environments (AWS, GCP) and datacenter infrastructure - Hands-on experience with SIEM platforms and SOAR tools — including detection-as-code methodologies - Strong understanding of AI/ML applications in security operations — agentic SOC, automated triage, and intelligent alert enrichment - Experience managing the full incident lifecycle across complex, multi-brand or multi-tenant environments - Deep knowledge of attacker TTPs (MITRE ATT&CK), endpoint and network forensics, and threat hunting techniques - Experience with cloud security monitoring (AWS CloudTrail, GuardDuty, Security Hub, CloudWatch; GCP Security Command Center), datacenter security, and container orchestration security (Kubernetes) - Familiarity with identity and access security monitoring (Okta, SSO, MFA events) - Experience coordinating with external incident response teams, law enforcement, and cross-functional stakeholders during security events - Polished verbal and written communication skills — ability to communicate clearly during high-pressure incidents and deliver thorough post-incident reports to technical and executive audiences - Relevant certifications are a plus: GCIH, GCFA, GCIA, GSOM, CISSP, or equivalent Nice to Have - Experience with Python-based detections and log analysis in modern cloud-native SIEM platforms - Background in the consumer internet/dating industry or other high-scale B2C platforms - Familiarity with Cloudflare (WAF, Bot Management), CrowdStrike, and SaaS security monitoring (Obsidian or similar) - Experience building or leading a Blue Team volunteer program or cross-functional security response team $170,000 - $190,000 a year Why Match Group? Our mission is simple – to help people find love and happiness! We love our employees too and understand the importance of all life's milestones. Here are some of the benefits we are proud to offer: Mind & Body – Medical, mental health, and wellness benefits to support your overall health and well-being Financial Wellness – Competitive compensation, 100% employer match on 401k contributions up to 10% (cap at $10,000), as well as an employee stock purchase program to help you feel supported in your financial security Unplug – Generous PTO and 14 paid holidays so you can unplug Career – Annual training allowance for professional development and ERG membership opportunities and events so you feel connected and empowered in your work Family – Families come in all shapes and sizes so we offer 20 weeks of 100% paid parental leave, fertility, adoption, and child care resources, as well as pet insurance and discounts Company Gatherings – We host company events where our employees get to know each other and build a sense of connection and belonging! We are proud to be an equal opportunity employer and we value the rich dynamics that diversity brings to our company. We do not discriminate on the basis of race, religion, color, creed, national origin, ancestry, disability, marital status, age, sexual orientation, sex (including pregnancy and sexual harassment), gender identity or expression, uniformed service or veteran status, genetic information, or any other legally protected characteristic. Period. If you require a reasonable accommodation to participate in the hiring process — such as during pre-employment testing or interviews — please indicate this by selecting “Yes” in the accommodation request field. We’ll reach out to discuss your needs if you're selected for the interview stage. #MG
Title: Cybersecurity Manager (Incident Response & Security Operations) Location: Vancouver, British Columbia Type: Full-time Workplace: hybrid Category: Security Job Description: About the Role As the Manager, IR / SOC, you will lead the integrated team responsible for Detection Engineering, Security Operations Center (SOC), and Incident Response (IR) across Match Group. Reporting to the Sr. Director of Security Engineering, you will drive the strategic vision of maximizing rapid and accurate threat response capabilities by integrating these three core functions and leveraging AI-driven innovation. You will own the detection lifecycle end-to-end — from signal engineering and alert tuning through triage, investigation, and incident resolution — while building toward an AI-augmented SOC model that reduces noise, accelerates response, and scales across a global portfolio. What You'll Do - Lead and develop a high-performing team of SOC analysts, detection engineers, and incident responders operating across multiple time zones with 24/7 coverage - Play a key role in developing the detection engineering framework, contributing to detections-as-code (DaC) via GitOps/CI/CD pipelines for consistency and automated deployment - Drive AI Agentic SOC adoption — evaluate, select, and implement AI-driven triage and investigation tooling to maximize SOC efficiency, reduce false positives, and accelerate initial response speed - Manage the full incident lifecycle — from detection through containment, eradication, recovery, and lessons learned — partnering with Legal, Communications, Privacy, and Engineering teams - Build and refine detection content across the SIEM platform, integrating log sources across all MG brands (Tinder, Hinge, Match, E&E, HPCNT, Eureka, and New Bets) - Establish and track SOC metrics and SLAs, creating dashboards to visualize performance, alert fidelity, and response effectiveness - Coordinate and execute IR tabletop exercises (technical and management-level) across brands to validate readiness and improve playbooks - Partner with the Red Team to validate detection capabilities through adversary simulation and assumed-compromise testing - Collaborate with Platform Security, InfraSec, and AppSec teams to identify and close detection gaps across cloud-native and hybrid environments (AWS, GCP), datacenter infrastructure, endpoints (CrowdStrike), identity (Okta), SaaS, and application layers - Integrate threat intelligence into detection and response workflows to anticipate and proactively defend against emerging threats - Use automation to improve detection and response times and mitigate incident impact What You'll Bring - 5+ years of experience in security operations, incident response, detection engineering, or threat hunting, with 2+ years in a team leadership or management role - Proven experience building and operating a modern SOC in cloud-native and hybrid environments (AWS, GCP) and datacenter infrastructure - Hands-on experience with SIEM platforms and SOAR tools — including detection-as-code methodologies - Strong understanding of AI/ML applications in security operations — agentic SOC, automated triage, and intelligent alert enrichment - Experience managing the full incident lifecycle across complex, multi-brand or multi-tenant environments - Deep knowledge of attacker TTPs (MITRE ATT&CK), endpoint and network forensics, and threat hunting techniques - Experience with cloud security monitoring (AWS CloudTrail, GuardDuty, Security Hub, CloudWatch; GCP Security Command Center), datacenter security, and container orchestration security (Kubernetes) - Familiarity with identity and access security monitoring (Okta, SSO, MFA events) - Experience coordinating with external incident response teams, law enforcement, and cross-functional stakeholders during security events - Polished verbal and written communication skills — ability to communicate clearly during high-pressure incidents and deliver thorough post-incident reports to technical and executive audiences - Relevant certifications are a plus: GCIH, GCFA, GCIA, GSOM, CISSP, or equivalent Nice to Have - Experience with Python-based detections and log analysis in modern cloud-native SIEM platforms - Background in the consumer internet/dating industry or other high-scale B2C platforms - Familiarity with Cloudflare (WAF, Bot Management), CrowdStrike, and SaaS security monitoring (Obsidian or similar) - Experience building or leading a Blue Team volunteer program or cross-functional security response team Why Match Group? Our mission is simple – to help people find love and happiness! We love our employees too and understand the importance of all life's milestones. Here are some of the benefits we are proud to offer: Mind & Body – Medical, mental health, and wellness benefits to support your overall health and well-being Financial Wellness – Competitive compensation, 100% employer match on 401k contributions up to 10% (cap at $10,000), as well as an employee stock purchase program to help you feel supported in your financial security Unplug – Generous PTO and 14 paid holidays so you can unplug Career – Annual training allowance for professional development and ERG membership opportunities and events so you feel connected and empowered in your work Family – Families come in all shapes and sizes so we offer 20 weeks of 100% paid parental leave, fertility, adoption, and child care resources, as well as pet insurance and discounts Company Gatherings – We host company events where our employees get to know each other and build a sense of connection and belonging! We are proud to be an equal opportunity employer and we value the rich dynamics that diversity brings to our company. We do not discriminate on the basis of race, religion, color, creed, national origin, ancestry, disability, marital status, age, sexual orientation, sex (including pregnancy and sexual harassment), gender identity or expression, uniformed service or veteran status, genetic information, or any other legally protected characteristic. Period. If you require a reasonable accommodation to participate in the hiring process — such as during pre-employment testing or interviews — please indicate this by selecting “Yes” in the accommodation request field.


