For a referral, simply DM me your email address and mention this position. I’ll send you a referral link via email, where you can upload your resume.

For those who have already applied, please check your email regularly, including your spam folder, as some HireVue invites may end up there. Also, check your application status on the website. Note that “Application Submitted” means your application is no longer active. The initial interview invitation may take some time, depending on the required headcount and the volume of applicants.

**FAQ**

Q: How much is the salary/salary range?

A: I don’t know the exact amount. However, based on my experience, they usually ask for your latest payslip, and the offer is typically higher than what I received at my previous company.

Q: How many days of RTO (Return to Office)?

A: This depends on the line of business (LOB). In my current LOB, we have RTO twice a week, while some LOBs only require once a week. For new hires, it is highly likely that training will be conducted onsite.

Q: Do you accept undergraduates?

A: Please check the qualifications to see if a bachelor's or college degree is required. Some openings don’t explicitly mention it, so you can still try applying.

Q: Do you have non-voice or back-office roles?

A: Yes, but please review the job description carefully, as I’m not familiar with other lines of business.

Q: Is it hard to get into WTW?

A: In my experience, yes. I applied around 14 times and waited five months before they noticed my application. I was still employed while applying to WTW and only resigned once I received a job offer, which is why I was able to wait that long.

**Company:** WTW (Willis Towers Watson)

**Location:** BGC (BOTT/WCC)

**Work Set-Up:** Primarily hybrid. The number of RTO/WFH days depends on the line of business (LOB).

**Company Benefits**

* Night Differential: 20%
* Rice Subsidy: 10K annually (non-taxable)
* Clothing Allowance: 5K annually (non-taxable)
* Transportation Allowance: 7K/month (equivalent to Php320.61 per day) (taxable)
* Retirement Plan
* Leaves: 15 VL/15 SL
* HMO: 500K (Intellicare)
* Group Life Insurance
* Emergency Loan: 200% of your monthly basic salary

**Other openings:**

* [Service Manager](https://www.reddit.com/r/BPOinPH/comments/1rh2cvb/wtw_hiring_service_manager/)
* [Technology Resilience - Assurance](https://www.reddit.com/r/BPOinPH/comments/1rh29wd/wtw_hiring_technology_resilience_assurance/)
* [Customer Service Supervisor (Night Shift, 100% Onsite)](https://www.reddit.com/r/BPOinPH/comments/1rh25ix/wtw_hiring_customer_service_supervisor_night/)
* [Benefits System Administrator (Night Shift)](https://www.reddit.com/r/BPOinPH/comments/1rh1ofx/wtw_hiring_benefits_system_administrator_night/)
* [Global Benefits Management Analyst](https://www.reddit.com/r/BPOinPH/comments/1rb07dd/wtw_hiring_global_benefits_management_analyst/)
* [Lead Associate, Private Equity Manager Research - Investment](https://www.reddit.com/r/BPOinPH/comments/1rb04pw/wtw_hiring_lead_associate_private_equity_manager/)
* [Service Transition Specialist](https://www.reddit.com/r/BPOinPH/comments/1razyqu/wtw_hiring_service_transition_specialist/)
* [UK Pension Administrator](https://www.reddit.com/r/BPOinPH/comments/1r8he6r/wtw_hiring_uk_pension_administrator/)
* [Canada Pension Benefits Analyst](https://www.reddit.com/r/BPOinPH/comments/1r8haod/wtw_hiring_canada_pension_benefits_analyst/)
* [Pension Benefits Administrator](https://www.reddit.com/r/BPOinPH/comments/1r8h74c/wtw_hiring_pension_benefits_administrator/)
* [Junior Automation Developer](https://www.reddit.com/r/BPOinPH/comments/1r3byr2/wtw_hiring_junior_automation_developer/)
* [Developer 2 (C#.NET - Night Shift)](https://www.reddit.com/r/BPOinPH/comments/1r3bp7e/wtw_hiring_developer_2_cnet_night_shift/)
* [Data Analyst, Benefits Data Source (Morning Shift)](https://www.reddit.com/r/BPOinPH/comments/1r3bm0v/wtw_hiring_data_analyst_benefits_data_source/)
* [French Data Analyst, Benefits Data Source (Night Shift)](https://www.reddit.com/r/BPOinPH/comments/1r3bhwj/wtw_hiring_french_data_analyst_benefits_data/)
* [GSOC L3 - Manila](https://www.reddit.com/r/BPOinPH/comments/1r2dub7/wtw_hiring_gsoc_l3_manila/)
* [Pharmacy Solutions Financial Team Leader, Health and Benefits NA (Night Shift)](https://www.reddit.com/r/BPOinPH/comments/1r2df46/wtw_hiring_pharmacy_solutions_financial_team/)
* [Pharmacy Benefits Analyst, Health and Benefits NA (Night Shift)](https://www.reddit.com/r/BPOinPH/comments/1r2d6ux/wtw_hiring_pharmacy_benefits_analyst_health_and/)
* [Investment Analyst (Middle Office)](https://www.reddit.com/r/BPOinPH/comments/1qx2frh/wtw_hiring_investment_analyst_middle_office/)
* [Analyst – Health and Benefits (Great Britain)](https://www.reddit.com/r/BPOinPH/comments/1qx2buo/wtw_hiring_analyst_health_and_benefits_great/)
* [Senior Training Administrator](https://www.reddit.com/r/BPOinPH/comments/1qx29cw/wtw_hiring_senior_training_administrator/)
* [Flexible Benefits Administration Analyst](https://www.reddit.com/r/BPOinPH/comments/1qx1ypp/wtw_hiring_flexible_benefits_administration/)
* [Major Incident Management Analyst (Rotating Shift)](https://www.reddit.com/r/BPOinPH/comments/1qw4xwe/wtw_hiring_major_incident_management_analyst/)
* [Business Analyst 2 (Night Shift)](https://www.reddit.com/r/BPOinPH/comments/1qw4n3e/wtw_hiring_business_analyst_2_night_shift/)
* [Retirement Associate](https://www.reddit.com/r/BPOinPH/comments/1qs3t7q/wtw_hiring_retirement_associate/)
* [Retirement Analyst](https://www.reddit.com/r/BPOinPH/comments/1qs3mdn/wtw_hiring_retirement_analyst/)
* [Processing Associate (Life or Non-Life Insurance)](https://www.reddit.com/r/BPOinPH/comments/1qpwhy9/wtw_hiring_processing_associate_life_or_nonlife/)
* [Collections Supervisor - Europe](https://www.reddit.com/r/BPOinPH/comments/1qov7ub/wtw_hiring_collections_supervisor_europe/)
* [GFS Cash Applications Analyst](https://www.reddit.com/r/BPOinPH/comments/1qnvt9y/wtw_hiring_gfs_cash_applications_analyst/)
* [Investment Analyst - Funds](https://www.reddit.com/r/BPOinPH/comments/1qkank5/wtw_hiring_investment_analyst_funds/)
* [Billing and Collections Analyst](https://www.reddit.com/r/BPOinPH/comments/1qkaimg/wtw_hiring_billing_and_collections_analyst/)
* [Senior DevOps Engineer (EMEA)](https://www.reddit.com/r/BPOinPH/comments/1qjeomq/wtw_hiring_senior_devops_engineer_emea/)
* [Procure-to-Pay (P2P) Service Management Functional Lead – VMD, T&E and Helpdesk](https://www.reddit.com/r/BPOinPH/comments/1qh5kco/wtw_hiring_procuretopay_p2p_service_management/)
* [Procure-to-Pay (P2P) Service Management Functional Lead – Accounts Payable](https://www.reddit.com/r/BPOinPH/comments/1qh556n/wtw_hiring_procuretopay_p2p_service_management/)
* [Director, Corporate Risk and Broking NA](https://www.reddit.com/r/BPOinPH/comments/1qd3lhx/wtw_hiring_director_corporate_risk_and_broking_na/)
* [Business Analyst 1 - Technology (Night Shift) (Fresh Graduate Hiring)](https://www.reddit.com/r/BPOinPH/comments/1qd39us/wtw_hiring_business_analyst_1_technology_night/)
* [Business Support Senior Specialist - HR Service Center (Japanese Speaker)](https://www.reddit.com/r/BPOinPH/comments/1qd377l/wtw_hiring_business_support_senior_specialist_hr/)
* [HR Generalist](https://www.reddit.com/r/BPOinPH/comments/1q8q3u3/wtw_hiring_hr_generalist/)
* [Cloud Operations Support Analyst (Rotating Shift)](https://www.reddit.com/r/BPOinPH/comments/1q7wk0x/wtw_hiring_cloud_operations_support_analyst/)
* [GDC Data - Reconciliation Analyst](https://www.reddit.com/r/BPOinPH/comments/1q7wg4u/wtw_hiring_gdc_data_reconciliation_analyst/)
* [CRB NA Client Specialist (Work Onsite)](https://www.reddit.com/r/BPOinPH/comments/1q7s4n6/wtw_hiring_crb_na_client_specialist_work_onsite/)
* [Actuarial Valuation Analyst](https://www.reddit.com/r/BPOinPH/comments/1q7rrpg/wtw_hiring_actuarial_valuation_analyst/)
* [Team Manager (Global Certificate Center)](https://www.reddit.com/r/BPOinPH/comments/1q337s8/wtw_hiring_team_manager_global_certificate_center/)
* [Database Administrator](https://www.reddit.com/r/BPOinPH/comments/1px16uv/wtw_hiring_database_administrator/)
* [Pharmacy Benefit Team Leader (Night Shift)](https://www.reddit.com/r/BPOinPH/comments/1pvs35h/wtw_hiring_pharmacy_benefit_team_leader_night/)
* [Pharmacy Solutions Financial Specialist (Night Shift)](https://www.reddit.com/r/BPOinPH/comments/1pvs1bz/wtw_hiring_pharmacy_solutions_financial/)
* [Pensions Data and Transition Specialist](https://www.reddit.com/r/BPOinPH/comments/1pjlfw2/wtw_hiring_pensions_data_and_transition_specialist/)

**Internship Programs:**

* [2026 Health and Benefits - Intern Program Business Development Team - Manila](https://www.reddit.com/r/BPOinPH/comments/1razvf6/wtw_hiring_2026_health_and_benefits_intern/)
* [2026 Actuarial Valuation - Intern Program Retirement Business Consultancy- Manila](https://www.reddit.com/r/BPOinPH/comments/1razhsc/wtw_hiring_2026_actuarial_valuation_intern/)
* [2026 Human Resources - Intern Program Regional Human Resources Services - Manila](https://www.reddit.com/r/BPOinPH/comments/1raze91/wtw_hiring_2026_human_resources_intern_program/)
* [2026 Central Team Strategies and Solutions - Intern Program Central Team - Manila](https://www.reddit.com/r/BPOinPH/comments/1qs4rgb/wtw_hiring_2026_central_team_strategies_and/)
* [2026 Actuarial Valuation - Intern Program Retirement Business](https://www.reddit.com/r/BPOinPH/comments/1qg7r97/wtw_hiring_2026_actuarial_valuation_intern/)

# Description

As part of the Cyber Defence team in the Global Security Operations Centre, you will provide security monitoring, triage, and investigation of potential incidents, and help to constantly improve the ways that the team works so that we can keep up with the latest threats against our business.

Fast and effective identification and triage of potential incidents is essential for us to protect our critical data and assets, and you will be at the forefront of this exciting area of Cyber Security, protecting the business and our interests daily.

You will need to have a good technical aptitude, a calm approach under pressure, excellent communicative skills to technical and nontechnical audiences, and have a genuine passion for security.

**The Role**

▪ Perform investigations on security incidents, detect potential threats via log analysis, and leverage tools including SIEM, UEBA, and EDR.  
▪ Ensure that there is a timely response to any cyber incidents to minimize the impact to the business, including interacting with different technical teams and business stakeholders where needed.  
▪ Act as the primary escalation point of L1 analyst for complex incidents, performing investigations and root cause analysis,  
initiating containment actions, and collaborating with L3 analysts and other teams as required.  
▪ Escalate high/critical severity incidents to the appropriate escalations team according to the established process.  
▪ Safely acquire and preserve the integrity of cyber security data required for incident analysis to help determine the technical/operational impact, root cause(s), scope, and nature of incidents.  
▪ Escalation point to provide process and/or technical advice for L1 analyst.  
▪ The L2 analyst also acts as a shift lead, managing shift workload to ensure incidents and tasks are appropriately assigned and handled within the shift.  
▪ L2 analyst is also responsible in preparing and send the end of shift report to Leadership team.  
▪ Lead and document handover calls to ensure all updates, unassigned tickets, pending tasks, and ongoing investigations are effectively communicated to the next shift.  
▪ Perform quality audit for tickets that were handled by L1 analysts to ensure incidents were handled in accordance to established processes.  
▪ Recommend alert/s for tuning to minimize false positives and improve the businesses’ security posture against threat actors.  
▪ Contribute to SOC process maturity and continuous improvement by creating and updating process documentation and knowledge base content, and by enhancing alerts through tuning activities.  
▪ Provide in-shift guidance, training, and mentorship to help new joiners and L1 analysts develop operational skills.

# Qualifications

**The Requirement**

▪ Work as part of a 24/7 SOC across multiple locations, requiring strong teamwork and the ability to collaborate with internal  
stakeholders and colleagues to consistently deliver exceptional service and support.  
▪ 4 - 5 Years’ Experience working as part of a mature cyber defence centre or security operations centre.  
▪ Ability to troubleshoot and research security issues effectively, and communicate clearly with technical and non-technical  
stakeholders, maintaining professionalism.  
▪ Effectively manage time and reliably complete assigned tasks/incidents within shift.  
▪ Hands on experience of using a SIEM, UEBA, and EDR as a security analyst.  
▪ Lead investigations and collaborate with business stakeholders to ensure thorough analysis and resolution of security  
alerts and incidents.  
▪ Great verbal and written communication skills, and the ability to write reports in a structured methodology.  
▪ To be inquisitive, with a strong sense of personal responsibility for learning and self-development.  
▪ Ability to identify common attack techniques within the context of specific technologies.  
▪ Working knowledge of Linux, MacOs, and Windows operating systems.

  
Beneficial:  
▪ Any relevant security certifications (SC-200, SC-900, Security+, CySA+, CASP+, etc.).  
▪ Any relevant network certifications (Network +, CCNA, etc.).  
▪ Knowledge of other key IT fields (such as Web Applications Firewall, databases, Active Directory, data loss  
protection, EDR Solutions, SIEM, network security systems such as web proxies, and firewalls)

 

WTW Hiring: Cyber Defence - Global Security Operations Centre (GSOC) Level 2 Analyst