Junior Level 2 Network Security Engineer at RecruitGo

Quezon City, Metro Manila, Philippines -

Full Time

Start Date

Immediate

Expiry Date

28 May, 26

Salary

0.0

Posted On

27 Feb, 26

Experience

0 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Network Security, Cyber Security, SIEM, EDR, XDR, SOC, Incident Response, Microsoft Defender for Endpoint, CrowdStrike EDR, SentinelOne EDR, Stellar Cyber XDR, MITRE ATT&CK, NIST, Log Analysis, TCP/UDP, SSH

Industry

Human Resources Services

Description

About Us: RecruitGo is a leading Employer of Record (EOR) company specializing in bridging top talent in emerging markets with global clients. Our services enable businesses to hire, manage, and pay employees internationally with ease. We are committed to providing seamless and efficient solutions to our clients and fostering a dynamic and inclusive work environment for our team. Position Overview The L1 Cyber Engineer is a junior level position. Working as part of a team the SOC Engineer’s primary role is to work on helpdesk tickets for our Managed Security Services (MSS) department. The position is dual rolled, combining a Cyber Security Analyst and a Network Security Engineer at a junior level. This role will build a foundation across all aspects of MSS technologies, allowing for the candidate to develop their own career path within VirtualArmour. Responsibilities • Monitor and triage security and network alerts from network monitoring, EDR/XDR, SIEM, and related security tooling; prioritize incidents based on risk and business impact. • Investigate endpoint threats (malware, ransomware, credential theft, persistence, lateral movement) using Microsoft Defender for Endpoint (MDE), CrowdStrike EDR, SentinelOne EDR, and Stellar Cyber XDR. • Identify common attack patterns (phishing, malware execution, credential abuse, lateral movement, persistence indicators) and recommend next steps. • Escalate complex or high-severity incidents to Tier 2/IR with high-quality handoffs (evidence, hypotheses, affected entities, attempted actions). • Support ongoing investigations by collecting additional artifacts/logs, re-checking endpoints, and monitoring for recurrence. • Document findings clearly in the ticketing system, ensuring complete timelines, evidence, and actions taken. • Follow SOC runbooks, playbooks, and standard operating procedures (SOPs) consistently. • Participate in shift handovers and maintain accurate case notes to ensure continuity of operations. • Identify recurring false positives, detection gaps, and tuning opportunities; propose improvements to content/rules and playbooks. • Stay up to date on information technology trends and security standards. • Adhere to company-wide best practices for IT security. Qualifications • A strong desire to work in either Cyber security or Network security fields • Strong understanding of SIEM, XDR, and EDR fundamentals (telemetry types, detection logic, correlation, and response workflows). • Understanding of attack lifecycle concepts (MITRE ATT&CK basics, NIST, Lockhead Martin etc.). • Ability to analyze endpoint and security logs (Windows Event Logs concepts, process/parent-child relationships, network indicators). • Ability to demonstrate an understanding of IP protocols like DHCP, FTP/SFTP, HTTPS/HTTPS, TCP/UDP, SSH etc. • Strong written communication and ticket hygiene (clear summaries, evidence-based conclusions). • Comfort working in a 24x7 SOC environment and meeting SLA-driven targets. • Team player with strong collaboration skills and a flexible approach to problem solving. Preferred Qualifications • 6 months - 2 years in a SOC, MSSP, or IT security operations role (internship/coop considered). • A bachelor's degree in cyber security or related field, or equivalent level of experience within IT. • Certifications (nice to have): CompTIA Security+, SC-200, CCNA, or vendor-specific endpoint/SIEM training. Why RecruitGo? RecruitGo seamlessly links world-class business partners with top-tier global talent in emerging markets. Secure legal employment through our Employer of Record services and embark on a journey to unparalleled professional opportunities. Diverse Challenges: Each day offers fresh opportunities and unique challenges that keep your work engaging and rewarding. Team Collaboration: Join forces with a supportive team, where your insights and contributions are valued. Inclusivity: Be part of an inclusive and diverse workplace that values your contributions. Work with the internal team to ensure timely delivery of services to clients and ensure that client expectations are met.

Responsibilities

The primary role involves monitoring and triaging security and network alerts from various tools, investigating endpoint threats like malware and credential theft, and escalating complex incidents with high-quality handoffs. Responsibilities also include documenting findings, following standard operating procedures, and identifying opportunities for detection content tuning.