Security Analyst

Overview We are Cambridge University Press & Assessment, a distinguished global academic publisher and assessment organisation affiliated with the University of Cambridge. We are looking for a Security Analyst to join our Global Security Operations Centre (SOC) in Manila. In this role, you will monitor, investigate, and respond to security alerts while strengthening defences to prevent future incidents. You will analyse SIEM logs, contribute to incident response, and provide guidance to junior analysts to ensure effective threat containment. You will collaborate with global teams to protect sensitive data, enhance operational resilience, and support the organisation's security maturity. What you will do as a Security Analyst Reporting to the Security Operations Lead, you will help defend our network infrastructure against cyber threats. Your responsibilities will include: Monitor system logs daily to detect unusual activity and perform proactive threat hunting around the clock. Analyse and resolve incidents using established procedures, ensuring timely and accurate responses. Follow incident response processes for alerts such as malware, DDoS attacks, and data breaches, escalating when necessary. Provide Level 2 support for Security Operations, escalating to Level 3 when required. Assess and report security risks across networks, systems, and applications. Maintain and update documentation, processes, and procedures to keep them current and useful. Stay informed about new cybersecurity threats, technologies, and trends. What makes you the ideal candidate An ideal candidate has the following qualities: Proven professional experience in IT or Security Operations (e.g., technical support or junior security analyst roles). Solid understanding of information security through hands-on experience and formal training. Practical knowledge of key security tools and technologies such as firewalls, IDS/IPS, DLP, endpoint security, data encryption, NAC, web/email filtering, penetration testing, forensics, and SIEM. Clear written and verbal communication skills, able to explain issues to both technical and non-technical audiences. The ability to stay calm and focused under pressure. Knowledge of security frameworks and standards like ISO 27001 and PCI DSS. What you can expect Work setup: Hybrid environment with office presence two days a week. Work schedule: 15:00 to 23:00 Manila time, with flexibility during major incidents or to support shifting schedules. Employment type: Permanent; Salary range: Php 60,000 to 81,000. We encourage applicants within this range to apply. What you get Regular Employment on Day 1 HMO Coverage and Life Insurance on Day 1 Paid Annual Leaves (Vacation, Well-being, Flexible, Holiday, and Volunteering leaves) Opportunities for career growth and development Access to well-being programs Flexible schedule, hybrid work arrangement and work-life balance Opportunity to collaborate with colleagues from diverse branches About Cambridge Cambridge University Press & Assessment is a world-renowned not-for-profit academic publisher and assessment organisation, part of the University of Cambridge. With a legacy of over 800 years in education, we are dedicated to unlocking the potential of learners and educators across the globe. Joining Cambridge’s second largest global office in the Philippines—operating for over 22 years with 1,300+ colleagues—means becoming part of an extraordinary institution renowned worldwide. We are recognised as a Great Place to Work® for three consecutive years, reflecting our inclusive culture and commitment to the growth and well-being of our people. Qualifications Key qualifications include: Seniority level: Associate Employment type: Full-time Job function: Information Technology Industries: Book and Periodical Publishing, Higher Education, and E-Learning Providers Application notes Applications received through the system will be reviewed on a rolling basis and may close the vacancy once sufficient applications are received. Tailor your CV (cover letter optional) and submit as early as possible. #J-18808-Ljbffr