SecOps Analyst – Systems Implementation, Hardening

This is a fully remote position, open to applicants in Philippines.

📋 Description

• Collaborate with network, infrastructure, cloud, endpoint, and identity teams to establish cybersecurity measures.

• Aid in validating the configuration and effectiveness of security controls such as MFA, EDR, SIEM logging, firewalls, segmentation, vulnerability management, access controls, encryption, backups, and hardening baselines.

• Examine technical designs, infrastructure modifications, cloud deployments, and network implementations to pinpoint cybersecurity risks prior to production rollout.

• Assist in ensuring that security tools like SIEM, EDR, vulnerability scanners, email security platforms, cloud security tools, and identity protection measures are correctly implemented and functioning as intended.

• Help validate firewall configurations, network segmentation, VPN access, privileged access, exposed services, and cloud security settings to detect excessive or risky access.

• Support initiatives aimed at improving cybersecurity related to hardening, logging, monitoring, access control, segmentation, cloud security, and endpoint protection.

• Generate technical findings, remediation strategies, posture reports, and implementation validation reports.

• Serve as the technical liaison between cybersecurity requirements and operational IT execution.

⛳️ Requirements

• Experience: 3–5 years in cybersecurity, infrastructure security, network security, cloud security, security engineering, or technical IT operations, with practical experience in implementing and validating security controls.

• Technical Expertise: Proficiency with SIEM, EDR/XDR, vulnerability management, cloud security, identity security, firewall solutions, and secure architecture design and execution.

• Preferred Tools: Knowledge of one or more technologies such as Elastic, QRadar, Wazuh, SentinelOne, CrowdStrike, AWS, Azure, Google Cloud, Microsoft Entra ID, Fortinet, Cisco, Intune, SCCM, and JAMF.

• Frameworks & Standards: Familiarity with CIS Controls, CIS Benchmarks, NIST CSF, ISO 27001, and MITRE ATT&CK.

• Desired certifications include CompTIA Security+, CySA+, Microsoft AZ-500/SC-300, AWS Security Specialty, Fortinet FCP/NSE, CCNA, CCSP, ZTCA, or SABSA Foundation (not mandatory).

• Proficiency in English at C1 level is required.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Opportunities for professional development and career advancement.

• Comprehensive health and wellness benefits.

• Flexible work arrangements and a supportive work environment.