A

Apex Fintech Solutions

Provides digital investing infrastructure and custody

Security Operations Center Analyst

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeManila, Metro Manila, Philippines

About the Job

Requirements

  • At least two years of experience in a security operations or related information security role, ideally at Tier 1 or Tier 2 level.
  • Knowledge of security methodologies and frameworks, including the Cyber Kill Chain, the Diamond Model, MITRE ATT&CK, and D3FEND.
  • Knowledge of technical security solutions, including firewalls, security information and event management (SIEM), network and host intrusion detection and prevention systems (NIDS/NIPS/HIDS/HIPS), endpoint detection and response (EDR), data loss prevention (DLP), security orchestration, automation and response (SOAR), proxies, network behavior analytics, orchestration, automation, and cloud security.
  • Strong knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS, and HTTP protocols; network analysis; network and security applications; and email security.
  • Good knowledge of common malware threats and attack methods.
  • Basic knowledge of scripting and programming languages such as PowerShell, Python, Bash, .NET, Ruby, Java, or C.
  • Willingness and ability to work rotating shifts, including nights, weekends, and public holidays.
  • Ability to communicate clearly in written and visual documents for different audiences, including in shift handovers.
  • Ability to manage change and adapt by adjusting priorities or processes as needed.
  • Ability to work independently as a representative of Information Security and collaborate across shifts and locations.
  • Ability to develop thorough documentation and operational playbooks, and suggest alert enhancements that improve detection capability.
  • Ability to manage multiple tasks and investigations simultaneously and prioritize by risk.
  • Fundamental understanding of network, infrastructure, cloud, and application technologies and practices.
  • Willingness to work shifts that cover the SOC 24 hours a day, seven days a week, including evenings and overnight hours, and to provide call-out or on-call support outside scheduled shifts when required.

Responsibilities

  • Monitor, triage, and investigate security alerts and events in real time using SIEM, UEBA, EDR, DLP, network monitoring, email security, vulnerability, cloud, and threat intelligence tools.
  • Correlate and analyze events using information gathered from a variety of sources across the enterprise.
  • Provide Tier 1 and Tier 2 support, escalating and assisting in the remediation of critical security incidents.
  • Provide incident response support when analysis confirms an actionable incident.
  • Complete clear, documented handovers at the end of each shift so open alerts and incidents continue without delay.
  • Support threat hunting and analyze emerging threats and newly disclosed vulnerabilities, working with the Threat and Vulnerability Management team.
  • Analyze trends in security log data from security devices across multiple layers.
  • Respond to custom security detections, signatures, and correlations, and suggest alert and playbook enhancements that improve detection capability.
  • Generate reports, dashboards, and metrics from security technologies.
  • Communicate with internal stakeholders, including senior management, to provide updates on security incidents and confirm resolution.
  • Maintain security documentation, including incident reports, knowledge base articles, and operational playbooks.
  • Share information and integrate technologies with other analysts and teams.
  • Participate in internal projects that improve SOC efficiency and tooling.
  • Improve and challenge existing processes and procedures in a changing security environment.
  • Participate in on-call rotations, including shift hours and weekends.

Desired Qualifications

  • Experience as a security analyst, incident handler or responder, security engineer, or penetration tester.
  • Professional certifications such as GCIA, GCIH, GCFE, GCFA, Security+, CCNA CyberOps, OSCP, GPEN, GWAPT, CEH, or CySA+.

About the Company

Apex Fintech Solutions

Provides digital investing infrastructure and custody

Apex Fintech Solutions provides cloud-based infrastructure and tools that help clients launch, scale, and support digital investing for millions of end investors. Its offerings cover trading, wealth management, cost basis, tax reporting, and custody/clearing through Apex Clearing, all within an integrated ecosystem. It differentiates itself by delivering an end-to-end platform that combines custody and clearing with other investing services for hundreds of clients. Its goal is to enable clients to efficiently launch and grow digital investing at scale using scalable, regulatory-compliant infrastructure.

Company size
1,001-5,000
Company stage
Not listed
Total funding
Not listed
Headquarters
Dallas, TX
Founded
2012

Recently Posted Jobs

Explore more opportunities at Apex Fintech Solutions

See more jobs