Latest Jobs at Korapay

About The Role

• As a SOC Analyst, you will be responsible for monitoring, detecting, analyzing, and responding to cybersecurity threats and incidents within the organization. This role plays a critical part in maintaining the organization's security posture by leveraging security tools, threat intelligence, and established processes to identify and mitigate risks in real time.

Here are a couple of things you'll be doing:

• Monitor security events and alerts from SIEM, EDR, IDS/IPS, firewalls, and cloud security tools
• Analyze logs and alerts to identify potential security incidents or anomalies
• Perform initial triage to determine severity, impact, and scope of threats
• Escalate validated incidents based on defined procedures
• Investigate and respond to security incidents (e.g., phishing, malware, unauthorized access)
• Contain and remediate threats in collaboration with IT, Engineering and security teams
• Document incidents, actions taken, and lessons learned
• Support post-incident reviews and root cause analysis
• Leverage threat intelligence feeds to identify emerging threats and indicators of compromise (IOCs)
• Conduct proactive threat hunting activities to detect hidden threats
• Update detection rules and use cases based on the evolving threat landscape
• Support vulnerability management activities (scan review, prioritization, remediation tracking)
• Assist in patch validation and security control effectiveness testing
• Collaborate with engineering teams to improve security controls and detection capabilities
• Maintain accurate incident logs and case management records
• Prepare daily/weekly SOC reports and dashboards
• Develop and update incident response playbooks and runbooks
• Other duties as assigned by the CISO

Requirements
Here's what we're looking for:

• 2-4 years of experience in a SOC, cybersecurity, or IT security role
• Minimum of a Bachelor's degree certificate
• Hands-on experience with security tools such as SIEM (e.g., Splunk, QRadar), EDR (e.g., CrowdStrike, Defender), and firewalls
• Understanding of network protocols, operating systems, and common attack vectors
• Familiarity with incident response processes and frameworks
• Knowledge of frameworks such as MITRE ATT&CK, NIST, or ISO 27001
• Scripting or automation skills (Python, PowerShell, Bash) is preferred
• Good communication & interpersonal skills
• Positive attitude
• Ability to handle stress appropriately and interact well with others

Key Skills:

• Strong analytical and investigative mindset
• Ability to work under pressure in a fast-paced, 24/7 environment
• Attention to detail and critical thinking skills
• Effective communication and incident documentation skills
• Team collaboration and cross-functional coordination
• Continuous learning mindset to stay ahead of evolving threats

go to method of application »

About The Role

• As a Cybersecurity GRC Analyst, you will be responsible for supporting the organization’s information security governance, risk management, and compliance programs. This role ensures that security policies, controls, and processes align with regulatory requirements, industry standards, and business objectives. The analyst will assess risks, support audits, and help drive a strong security and compliance culture across the organization.

Here are a couple of things you'll be doing:

• Develop, review, and maintain information security policies, standards, and procedures
• Ensure alignment with industry frameworks (e.g., ISO 27001, NIST CSF, CIS Controls)
• Support the implementation and monitoring of security governance programs
• Drive security awareness initiatives and promote a culture of compliance
• Conduct risk assessments (enterprise, vendor, application, infrastructure)
• Maintain and update the organization’s risk register
• Perform control gap assessments and recommend remediation actions
• Support third-party/vendor risk management processes
• Track and report on risk treatment plans and mitigation progress
• Support compliance with regulatory and industry requirements (e.g., PCI DSS, SOC 2, GDPR)
• Coordinate internal and external audits, including evidence collection and walkthroughs
• Monitor compliance posture and track remediation of audit findings
• Assist in the development of compliance reports and dashboards for management
• Collaborate with security and IT teams to ensure controls are effectively implemented
• Assist in incident response from a compliance and reporting perspective
• Support control testing and continuous monitoring activities
• Maintain accurate documentation of policies, risk assessments, and control activities

• Other duties as assigned by the CISO.

Requirements

Here's what we're looking for:

• 2–4 years of experience in cybersecurity, IT risk, compliance, or audit
• Minimum of a Bachelor’s degree certificate
• Strong understanding of information security frameworks and standards (ISO 27001, NIST, SOC 2, PCI DSS)
• Experience with risk assessment methodologies and control frameworks
• Familiarity with regulatory requirements relevant to the industry (e.g., financial services, data protection laws)
• Experience with GRC tools
• Good communication & interpersonal skills
• Positive attitude
• Ability to handle stress appropriately and interact well with others.

Key Skills:

• Strong analytical and risk assessment skills
• Attention to detail and strong documentation capabilities
• Excellent communication and stakeholder management skills
• Ability to translate technical risks into business impact
• Strong organizational and project management abilities
• High level of integrity and professionalism