Security Analyst

This is a fully remote position, open to applicants in Philippines.

📋 Description

• Operate and uphold proactive security measures across client environments.

• Monitor and verify security signals while consistently enhancing security configurations and detection capabilities.

• Execute Security-as-a-Service operations, including reporting on security posture and the health of security tools.

• Improve detection quality through SIEM tuning, alert optimization, dashboard enhancements, and correlation rule refinement.

• Conduct in-depth analysis of Windows and Microsoft 365 logs to detect suspicious activities, security vulnerabilities, and possible indicators of compromise.

• Implement and assist with security hardening initiatives across endpoints, servers, cloud environments, and identity platforms.

• Manage and support security awareness training programs and phishing simulation efforts.

• Ensure that security tools and operational processes comply with established security standards and service requirements.

• Assess emerging security technologies and offer recommendations for their adoption and standardization.

• Support AI-driven security and automation projects by validating outputs and optimizing repeatable workflows.

• Act as a senior technical escalation point for complex security-related challenges.

• Collaborate with infrastructure, cloud, and operations teams to enhance security processes and standards.

• Clearly communicate security risks, findings, and recommendations to both technical and non-technical stakeholders.

• Engage in compliance-related discussions, evidence collection, and security assessments.

• Assist with CMMC, SOC, and other security compliance initiatives as required.

• Perform additional responsibilities as assigned.

⛳️ Requirements

• A minimum of 7 years of experience in a Managed Service Provider (MSP) environment.

• Preferred: Over 10 years of experience in cybersecurity, systems administration, security engineering, or systems integration.

• Technical Expertise in Security Operations & SIEM.

• Advanced experience with SIEM platforms, including:

• Log onboarding and normalization.

• Correlation rule development.

• Alert tuning.

• Dashboard creation.

• Security monitoring and incident investigation.

• Experience in supporting SOC workflows and security automation initiatives.

• Endpoint Security & EDR/XDR.

• Advanced hands-on experience with:

• SentinelOne.

• Huntress.

• EDR/XDR deployment and management.

• Threat detection and response workflows.

• Identity & Access Management.

• Advanced knowledge of:

• Microsoft Entra ID / Azure AD.

• Conditional Access.

• Multi-Factor Authentication (MFA).

• Privileged Access Management.

• Identity Governance.

• Microsoft Intune.

• Duo MFA.

• Networking & Security Infrastructure.

• Strong understanding of:

• TCP/IP networking.

• Firewall hardening.

• Secure network design.

• VLANs.

• Routing and switching.

• VPN technologies (IPSec and SSL).

• Network segmentation.

• Email & DNS Security.

• Experience administering:

• Mimecast (preferred).

• Email Threat Protection solutions.

• DNS and web filtering technologies.

• Security policy management and troubleshooting.

• Security Awareness & Training.

• Experience managing:

• Phishing simulation campaigns.

• Security awareness training platforms.

• Compliance-focused end-user security education.

• Vulnerability Management.

• Capability to analyze vulnerability assessments and translate findings into actionable remediation plans and hardening initiatives.

• Automation & Scripting.

• Strong PowerShell scripting skills.

• Python experience is a plus.

• Experience utilizing automation and AI tools to enhance operational efficiency.

• Compliance & Frameworks.

• Familiarity with:

• NIST Cybersecurity Framework (CSF) 2.0.

• CMMC 2.0.

• SOC 1 and SOC 2.

• Security governance and risk management principles.

• Soft Skills.

• Excellent written and verbal communication abilities.

• Strong organizational and time management skills.

• Capacity to work independently in a fast-paced environment.

• Strong analytical and problem-solving capabilities.

• Detail-oriented with a proactive approach.

• Ability to convey complex security concepts to both technical and non-technical audiences.

• Strong collaboration and stakeholder management skills.

🏝️ Benefits

• HMO coverage upon regularization.

• Paid time off and holiday benefits.

• Government-mandated benefits (SSS, PhilHealth, Pag-IBIG).

• Career development and certification support.

• Exposure to enterprise-level security technologies.

• Collaborative and highly technical work environment.

• Opportunities for professional growth and advancement.

• Work-life balance and a supportive leadership team.