The Role

At HelloConnect, you will be part of a dynamic team in (Inoza tower, BGC | Exxa tower, Quezon City | Puerto Princesa, Palawan) that embraces innovation and leverages advanced technology to create exceptional experiences. Our culture is built on collaboration, continuous learning, and a commitment to excellence. You’ll have the opportunity to work on impactful projects, develop your skills, and grow within a supportive environment that values diverse perspectives and experiences.

In this role, you will take on a key responsibility in improving the HelloFresh Security Logging & Monitoring Program by maturing the tools, processes and playbooks to reduce dwell time (indicators of which would be lowered MTTD&R), contributing to our ongoing efforts to drive business success and enhance customer satisfaction.

We’re looking for passionate individuals who can bring their unique skills and ideas to the table. Even if you don't meet every requirement but believe you’d excel in this role, we’d love to hear from you!

What you’ll do

• Responsible for SOC monitoring, use-case building, triage and advisory using cloud-native SIEM platforms
• Conduct initial triage of security events and incidents and document progress throughout the Incident Response Lifecycle
• Automate, optimize, automate and operate modern security solutions like EDR/EPPs and conventional Firewalls, IDS/IPS, Email Security, VPN, and MDM tools
• Leverage premium and open-source threat intel feeds to regularly sweep environments against rising APT campaigns
• Prepare status reports and follow up with the stakeholders through Jira and Incident Mgmt. Platform to close the remediation loop
• Facilitate efficient Incident Detection and Response in AWS cloud and enterprise IT environments

What you’ll bring

• A minimum of 2 years of experience working in mature SOC environments
• Security monitoring and incident response experience in public cloud environments such as AWS
• Experience with cloud SIEM & SOAR platforms, DDoS mitigation and preventing tools and Layer-7 Web-based perimeter security controls
• Understanding of network intrusion methods, network containment, segregation techniques and technologies such as Sandboxes and Intrusion Detection/Prevention Systems (ID/PS)