The IT Security department within the IT group is responsible for the definition of the security requirements, implementation and compliance monitoring to security policies, maintenance and improvement on security platforms and technologies, management of security operations, and provision of vulnerability management services across all ITG business units.
As a Security Analyst, you will be responsible for the triage and analysis of security alerts and incidents and defining and managing of security policies for all BDO endpoints. These include, but are not limited to: Endpoint Management, Forensic Analysis, Incident Response and Patch Management.
Role Responsibilities:
- Monitor alerts from security systems (e.g. SIEM Splunk, SIEM ELK, IPS, EDR, etc.) and from other third-party threat intel sources, and perform needful correlation and analysis
- Ensure BDO endpoints are monitored for compliance to BDO security standards
- Develop security use cases and rules in the log monitoring platform
- Coordinate periodic corrective and preventive maintenance of security systems
- Resolve issues related to endpoint protection software, keeping within the team's committed service level standard
- Evaluate relevant software products to improve endpoint security posture
- Regularly revisit existing tools and processes to improve efficiency and effectiveness
- Manage and implement projects initiated by the Unit Head and Section/Team Leads
Competencies:
- Technical Skills: Background in Security Monitoring, Application Programming, System Administration and Vulnerability Assessment and Penetration Testing (preferred)
- Communication Skills: Excellent communication and interpersonal skills, with the ability to effectively communicate complex concepts to diverse audiences and build consensus
- Analytical Skills: Problem-solving capabilities, strong analytical skills, and flexibility to be able to handle complex situations as necessary
- Ability to work independently and collaborate with teams in completing tasks and initiatives
Qualifications:
- Graduate of Computer Engineering, Computer Science, Electronic and Communication Engineering or similar.
- More than 3 years of relevant IT Security experience.
- CISSP and/or CISM is a plus, but not mandatory
- Candidate must be willing to work in Makati
