Security Analyst

• Protect a Microsoft-based environment across global operations through security monitoring, incident response, identity and access management, vulnerability management and continuous improvement of cyber security controls.
• Triage and investigate Microsoft Defender alerts and Arctic Wolf SOC escalations, including phishing, malware, suspicious sign-ins and endpoint activity.
• Coordinate containment, eradication and recovery activities with Arctic Wolf and internal IT teams, maintaining incident evidence and escalating major incidents when required.
• Support Microsoft Defender endpoint protection, Microsoft 365 security posture, security hardening and endpoint detection and response.
• Prioritise vulnerabilities based on exploitability, exposure and business criticality, and track remediation through closure.
• Support security baselines and patch compliance using Microsoft management tools and NinjaOne.
• Review and strengthen Active Directory and Microsoft Entra ID security, including MFA, Conditional Access, least-privilege access and periodic access reviews.
• Review privileged accounts, role-based access, service accounts and application permissions, and support identity-related threat response.
• Support improvement of Essential Eight controls, maintain evidence and remediation actions, and verify implementation with control owners.
• Support security risk assessments, policy reviews and audits, translating control gaps into prioritised actions.
• Record and manage security incidents, requests, problems and changes in Freshservice in line with ITSM processes.
• Perform root cause analysis, maintain response playbooks and knowledge articles, and support continuous improvement of recurring security issues.
• Report on incident response, remediation ageing, Defender coverage, identity risks and Essential Eight progress.
• Collaborate with service desk, infrastructure, application and business teams to resolve security issues while supporting operational continuity.
• Provide practical security guidance and contribute to phishing awareness and user education.
• Support incident handovers across time zones and participate in agreed after-hours incident response arrangements when required.
• Perform other position-level duties as they arise.

IT Security Analyst - Day Shift

• Serve as a Tier 3 Security Operations Center (SOC) engineer, monitoring and responding to security alerts from SIEM and security tools.
• Perform incident response activities including discovery, threat analysis and correlation, response, remediation, containment, and network or endpoint forensics.
• Monitor and respond to DLP alerts and incidents.
• Process and manage requests for security services, including customer security inquiries, malicious or blocked attachment and website reviews, firewall change requests, and vulnerability scans.
• Lead an assigned SecOps pillar and oversee its operations and technical project implementations.
• Support assigned SecOps and Infosec global or regional projects and initiatives.
• Support or perform vulnerability and penetration testing and drive remediation activity.

Security Analyst jobs in Philippines

IT Security Analyst - Day Shift

Senior Cybersecurity Analyst