SOC Analyst

About Thrive

Thrive is an innovative technology solutions provider focused on Cyber Security, Hybrid Cloud, Global Network Management, Disaster Recovery and traditional Managed Services. Thrive seeks individuals who want to develop valuable skills and build a career in a fast‑paced, work hard, play hard environment.

With a growing client base, Thrive is continuing to build out its security team. We are hiring a SOC Analyst 1 to join our Security Operations Center to assist with monitoring and improving our customers\' security posture while preventing, detecting, analyzing, and responding to cybersecurity incidents using technology and well-defined processes. The ideal candidate will have a passion for information security and value what a properly managed security monitoring solution can bring to client needs.

• Perform security event monitoring using SIEM from multiple sources, including network and host‑based intrusion detection/prevention systems, network infrastructure logs, systems logs, applications, and databases.
• Investigate intrusion attempts, differentiate false positives from true threats, and analyze exploits.
• Proactive monitoring and response to known and emerging threats.
• Contribute to Thrive’s information security strategy for internal teams and external clients (400+ in the northeast).
• Analyze data from the SOC and SIEM to determine if further analysis is needed.
• Work within Thrive’s security standards and best practices and recommend future enhancements.
• Manage clients’ security awareness training to help end users stay as safe as possible.
• Analyze vulnerability scans and determine remediation steps.
• Stay current on security events and techniques to keep clients protected.
• Build awareness through training and education.

• Knowledge of the following systems and technologies: SIEM, TCP/IP, computer networking, routing and switching, IDS/IPS, penetration and vulnerability testing, firewall and intrusion detection/prevention protocols, Windows/UNIX/Linux operating systems, network protocols and packet analysis tools, EDR, anti‑virus, anti‑malware, content filtering, and email/web gateways.
• Understanding of cybersecurity threats and experience with incident response standards and procedures.
• Demonstrates comprehension of good security practices.
• Professional experience in a system administration role supporting multiple platforms and applications.
• Ability to communicate network security issues to peers and management.

• Ability to analyze a large amount of data from various sources to solve complex problems and make good decisions. Must be able to work effectively in a team environment and collaborate with the team and other stakeholders.
• Computer Networking & Security.
• Vulnerability Discovery and Analysis.
• Operating System Internals.
• Familiarity with TCP/IP network protocols and common application layer protocols (e.g., HTTP, SMTP, DNS).
• Excellent written and verbal communication skills.
• Preferred skills: Knowledge of common Windows and Linux/Unix system calls and APIs; understanding anti‑virus; knowledge of programming languages.
• Knowledge of internal file structures for file formats commonly associated with malware (e.g., OLE, RTF, PDF, EXE).

Note: Only candidates located in the Philippines and willing to work out of the Clark office should apply.