Cybersecurity Specialist

This is a fully remote position, open to applicants in Philippines.

📋 Description

• Oversee and prioritize security alerts while investigating potential security incidents.

• Evaluate the scope, impact, priority, and appropriate next steps for security incidents.

• Record alert outcomes, findings, decisions, and actions taken.

• Escalate confirmed or suspected security incidents, providing relevant context.

• Coordinate approved containment, recovery, and follow-up actions during designated working hours.

• Conduct regular security and compliance reviews across assigned controls and applicable frameworks.

• Gather, review, organize, and maintain compliance documentation.

• Identify control deficiencies, missing evidence, control drift, and potential findings.

• Monitor findings and remediation commitments until completion or escalation.

• Maintain security plans, compliance records, assessment artifacts, and other documentation.

• Execute reviews of vulnerabilities, endpoints, configurations, backups, access, and security tools.

• Analyze vulnerability findings and confirm remediation status.

• Assess access, authentication, permissions, shared accounts, service accounts, and least-privilege controls.

• Conduct or assist with security risk assessments for systems, applications, vendors, projects, integrations, and significant changes.

• Keep risk and remediation records updated and follow up on outstanding items.

• Develop and maintain security procedures, runbooks, checklists, assessment tools, and triage guidance.

• Design, configure, execute, and assess approved phishing simulations and security tests.

• Identify shortcomings and suggest practical enhancements.

• Collaborate with IT, Engineering, and internal teams on security initiatives, findings, remediation, and user-facing security needs.

⛳️ Requirements

• Minimum of 3 years of relevant experience in security operations, information security, cybersecurity, or a closely related field.

• Practical experience with security monitoring and SIEM tools.

• Experience in alert triage, investigation, search or query capabilities, and documenting alert outcomes.

• Hands-on experience in device provisioning.

• Strongly preferred experience with Microsoft security and identity technologies, including Microsoft Entra ID, Microsoft Intune, Conditional Access policies, and endpoint and access controls.

• Comprehensive understanding of vulnerability management, access control, endpoint security, logging, and incident response.

• Proven experience performing regular security or compliance control activities.

• Ability to produce clear, review-ready evidence and documentation.

• Preferred experience with CMMC, NIST SP 800-171, PCI DSS, or similar frameworks.

• Relevant security certifications are preferred.

• Strong organizational skills, prioritization abilities, written communication, and follow-through.

• Capability to manage ongoing responsibilities and competing deadlines independently.

• Demonstrated problem-solving skills and sound judgment when dealing with incomplete or ambiguous information.

• Availability to work from 7:00 AM to 4:00 PM PST.

• Enthusiasm for remote work and collaboration within a distributed team.

• Must have a home internet connection of at least 25MBPS.

🏝️ Benefits

• Monthly salary of PHP 62,500.

• PHP 1,150/month rice allowance following the probationary period.

• 160 hours of accrued paid time off (PTO).

• Additional 8 hours of PTO for each year of service, up to a maximum of 40 extra hours.

• Paid US holidays.

• Statutory benefits mandated in the Philippines.

• Government contributions.

• Night differential pay.

• Holiday pay rates.

• Overtime compensation.

• 13th-month salary.

• Health Maintenance Organization (HMO) coverage starting Day 1.

• PHP 580/month internet stipend.

• Surprise treats, including coffee.

• Gifts for appreciation and recognition.

• Public acknowledgments and celebrations within the company.

• Virtual gatherings and team moments throughout the year.