About This Role
Monitoring, detecting, investigating, and responding to cyber security threats across the organization's environment is the core of this role. The Cybersecurity Analyst combines responsibilities in Security Operations, Incident Response, Threat Intelligence, Vulnerability Management, Governance, Risk & Compliance, and Security Awareness.
Responsibilities
- Monitor and investigate security events across SIEM, NDR, EDR/DR, firewalls, email security, and network security platforms
- Perform incident triage, containment, eradication, and recovery activities
- Manage high-volume security event monitoring and threat analysis
- Conduct root cause analysis and post-incident reviews
- Develop and maintain detection rules, use cases, and playbooks
- Conduct vulnerability assessments, penetration testing and risk analysis
- Track remediation activities and validate corrective actions
- Oversee deployment and verification of security patches
- Support third-party security assessments and audits
- Develop and maintain SOPs aligned with ISO 27001, NIST CSF/RMF, and the Data Privacy Act of the Philippines
- Support cybersecurity governance initiatives and security maturity improvement programs
- Participate in internal and external audits
- Prepare technical and executive-level cybersecurity reports
- Monitor threat intelligence feeds and emerging cyber threats
- Analyze Indicators of Compromise (IOCs) and attacker tactics, techniques, and procedures (TTPs)
- Perform proactive threat hunting activities
- Lead phishing simulation exercises and awareness campaigns
- Promote cybersecurity best practices across the organization
Requirements
- Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, or related field
- Minimum of 2 years experience in Security Operations Center (SOC), Cybersecurity Operations, or Information Security
- Experience working with SIEM platforms such as FortiSEM, Splunk, or equivalent
- Experience in incident detection, investigation, and response
- Knowledge in Windows, Linux, Active Directory, networking, and server administration
- Understanding of common cyber attack techniques including phishing, malware, ransomware, brute force attacks, and DDoS Experience in log analysis and event correlation
- Familiar with cybersecurity frameworks and standards such as NIST CSF and ISO 27001
- Strong analytical and problem-solving skills
- Good understanding of cybersecurity concepts and incident handling procedures
- Excellent oral and written communication skills
