IT Security Analyst (WFH)

Job Title: IT Security Analyst

Location: Makati

Type: Full-time

Work setup: Work from home

Shift: Nightshift

About Us

CloudConsole Inc., founded in Sweden, is a premier IT consulting and outsourcing company, is a premier provider of high-quality and expertly managed IT outsourcing services. We are dedicated to helping organizations achieve their goals through secure, reliable, and innovative IT solutions.

Role Overview

We are seeking an experienced and detail-oriented IT Security Analyst to join our dynamic team. The ideal candidate will be responsible for maintaining and enhancing the security posture of our IT systems and infrastructure. This role involves proactive monitoring, incident response, and the implementation of cutting-edge security measures.

Responsibilities

• Monitor event and network logs for security breaches and incidents.
• Analyze and respond to security alerts, phishing incidents, and other threats.
• Investigate and document security breaches, preparing detailed incident reports.
• Support threat hunting activities and address vulnerabilities to maintain a high-security standard.
• Participate in weekly on-call rotations for critical events after hours.
• Implement, configure, and monitor security solutions, such as firewalls, IDS/IPS, antivirus, EDR, MDR, and content filtering.
• Manage and maintain enterprise SIEM platforms (e.g., AlienVault, QRadar, LogRhythm, Rapid7).
• Conduct vulnerability assessments, penetration testing, and patch management processes.
• Develop and deploy security standards, policies, and procedures.
• Prepare and distribute security advisory emails and monthly patch release notifications.
• Run phishing simulation campaigns and facilitate security awareness training.
• Provide regular security assessments, reports, and recommendations to stakeholders.
• Collaborate with internal and external teams to ensure secure system administration and adherence to security best practices.
• Research and stay updated on the latest IT security trends and recommend enhancements.
  
  

Qualifications

• Bachelor's degree in information technology, Computer Science, or a related field.
• CompTIA Security+ certification is PLUS
• Additional certifications such as CompTIA A+, CompTIA Network+, or other Information Security credentials are a plus.
• Proficiency in at least one enterprise SIEM platform (e.g., AlienVault, QRadar, LogRhythm).
• Strong hands-on experience analyzing high volumes of logs, network data (e.g., NetFlow, FPC), and other attack artifacts.
• Hands-on experience with tools and techniques for penetration testing and vulnerability management.
• Familiarity with Linux OS environments (e.g., Kali Linux, Ubuntu) and Python scripting.
• Understanding of TCP/IP, common networking ports and protocols, OSI model, defense-in-depth strategies, and security concepts.
• Familiarity with tools such as ConnectWise Manage, ConnectWise Automate, Cylance, and SentinelOne.
• Understanding of firewalls, proxies, antivirus, EDR, MDR, content filtering, and IDS/IPS concepts.
• Ability to deploy patches on time while assessing business impact.
• Excellent communication and documentation skills to prepare security documents, runbooks, and policies.
  
  

Benefits

• Competitive Salary
• HMO upon regularization
• Upfront Leave Credits (On Day 1)
• Leave Cash Conversion
• Communication Allowance