It Security Analyst

Security Analyst

Location: Manila, Philippines

Position: Full-time

Overview:

Pax8 is the leading value-added cloud-based SaaS marketplace, simplifying the cloud journey for our partners by integrating technology, business intelligence, and proactive service to deliver an unparalleled experience. Serving thousands of partners through the indirect sales channel, our mission is to be the world's favorite marketplace for technology professionals to buy cloud products. We are a fast-growing, dynamic, and high-energy organization with a start-up feel, allowing you to make a meaningful impact on the business.

Position summary:

The Security Analyst at Pax8 is responsible for triaging and responding to cybersecurity events that occur throughout the day. This includes analysis of events, incident escalation, and remediation, particularly with users in compatible time zones. The role also analyzes and prioritizes detected vulnerabilities, monitors threat intelligence, configures and monitors SaaS security controls, and collaborates with the Security Operations team and colleagues.

Essential responsibilities:

• Monitoring for reported incidents and automated alerts from security tools. Triage and drive remediation efforts; clearly document findings.
• Perform forensic review of events and determine risk to Pax8 business operations.
• Assess security vulnerabilities in corporate and production systems; triage and prioritize for responsible teams.
• Help develop and monitor threat intelligence sources. Analyze threat intel data for applicability to Pax8’s business.
• Create and improve run books and automation across SecOps areas.
• Draft vulnerability and threat opinions for Pax8 users and discuss in proper channels as needed.
• Generate metrics to support Trust and Security initiatives.
• Stay up to date on industry trends and best practices; adapt the security program to address evolving threats.
• Collaborate with other departments to ensure security is integrated into all business processes.

Ideal skills, experience, and competencies:

• Three or more years in a security-specific operations or engineering role.
• Experience in vulnerability assessment and management, identity management, or threat intelligence activities.
• At least two years in L2 or higher incident response, forensic analysis, remediation, and risk-based prioritization in corporate environments.
• Experience securing public cloud deployments (AWS, Azure, GCP) with CSPM tooling beneficial.
• Experience using a major SIEM product and performing ad-hoc searches.
• Experience with Microsoft security tools (Defender, Entra, Compliance Center, Intune).
• Understanding of security best practices and frameworks.
• Excellent verbal and written communication, interpersonal and collaboration skills.

Required behaviors (as part of Company culture):

• Compassionate Candour
• Seek to Understand
• We Before Me
• Do What You Say
• Light Up Learning
• Driven by Passion

Required education & certifications:

• B.A./B.S. in a related field or equivalent work experience.
• Security-focused certifications such as CISSP, GIAC, CEH, CySA+ (optional but desired).
• Cloud security certifications related to AWS, Azure, and GCP (optional).

Other notes:

• Remote/hybrid work setup requires adequate, secure, private internet service.
• Travel: Infrequent.
• Reports to: Sr. Director of Security Operations
• Location: Manila, Philippines