Information Security Analyst

This is a fully remote position, open to applicants in Philippines.

📋 Description

• Analyze vulnerability reports, investigate findings, propose scalable remediation strategies, and monitor remediation progress until completion.

• Collaborate with Support, NOC, Engineering, and other technical teams to execute security remediations while minimizing client disruption and planning maintenance activities.

• Develop or assist in creating scripts, automation, and repeatable processes to enhance vulnerability remediation across various client environments.

• Address vulnerabilities identified through both internal and third-party vulnerability management systems.

• Complete Due Diligence Questionnaires and ensure timely responses to security and risk-related information requests.

• Review risk assessment and penetration testing outcomes, identify remediation actions, and engage in Business Impact Analyses and tabletop exercises.

• Measure and enhance alignment with Microsoft security standards, including Microsoft Intune configurations.

• Fortify workstation, cloud, infrastructure, and security configurations.

• Support system hardening across endpoints, cloud environments, identity, and other security technologies.

• Assist with SOC 2 and security operations tasks, including test restores, KnowBe4 phishing and training reviews, SIEM log assessments, and associated security-control activities.

• Contribute to cybersecurity incident response efforts, including investigation, remediation, and follow-up activities.

• Collaborate with the NOC and outsourced SOC resources to enhance security remediation runbooks and response protocols.

• Maintain security documentation, tickets, remediation records, and supporting evidence.

• Contribute to continuous improvement initiatives within the Information Security domain.

⛳️ Requirements

• Strong grasp of cybersecurity principles, security controls, risk management, and industry security practices.

• Experience in vulnerability management, analysis, remediation, and tracking.

• Familiarity with Microsoft Intune, Microsoft security standards, and endpoint or cloud security configurations.

• Experience with SIEM platforms, IDS/IPS solutions, vulnerability scanners, or similar security tools.

• Knowledge of RMM, SOAR, or other automation and security orchestration platforms.

• Scripting or automation experience to create scalable strategies for security remediation and operational tasks.

• Experience in developing and maintaining technical documentation, security procedures, and remediation runbooks.

• Strong analytical, troubleshooting, and problem-solving abilities.

• Excellent written and verbal communication skills.

• Ability to collaborate effectively across both technical and non-technical teams.

• Capability to work independently and collaboratively in a remote, fast-paced environment while managing multiple security priorities.

• Desirable: Experience with Managed Service Providers.

• Desirable: Experience in supporting security or compliance efforts in multi-client or highly regulated settings.

• Desirable: Familiarity with SOC 2, penetration testing, security assessments, due diligence, or related compliance initiatives.

• Desirable: Relevant cybersecurity, Microsoft, or cloud certifications such as AZ-500, SC-900, SC-300, CompTIA Security+, or similar credentials.

🏝️ Benefits

• Competitive salary.

• Comprehensive benefits.

• Great perks.

• Professional and career development opportunities.

• Remote work arrangement.