IT Security Administrator

Position Summary

The IT Security Administrator is responsible for safeguarding the organization's information assets by monitoring, analyzing, and responding to security threats across a wide range of security tools and platforms. This role plays a critical part in maintaining situational awareness, investigating security alerts, managing reported suspicious emails, and ensuring systems remain compliant with security standards and best practices. Working closely with the Senior Manager of IT Security and other cross-functional teams, the IT Security Administrator supports daily security operations, contributes to incident response activities, assists with security awareness training, and helps enhance the company's overall security posture. The ideal candidate is detail-oriented, proactive, technically skilled, and committed to upholding high standards of integrity and data protection.

Job Details:

Work Setup: Work from Home

Work Schedule: Monday to Friday | 9:30 PM to 6:30 AM (Manila Time)

Holidays: US Holidays

Responsibilities:

• Monitor the security tools implemented including but not limited to, CrowdStrike, Zscaler, Microsoft Defender, Tanium, Knowbe4, Tenable, Office 365, Azure AD, and computer log files, etc., to maintain situational awareness.
• Investigate security alerts received by the external SOC (Security Operations Center). The investigation will make use of all tools and log files possible and will determine if the alert is a false positive, a security event, an actual attack, and/or a security incident. The investigation will answer and report on the who, what, where, when, and how of the occurrence. The investigation will report on any actions taken to contain and/or remediate the situation and any recommendations for further action.
• Escalate any security incident (the confidentiality, integrity, or availability of any information or information asset that is negatively impacted) to the Senior Manager, IT Security, and Director of IT Operations.
• Investigate all reported suspicious emails and determine whether the email is malicious, non-malicious, or legitimate. The IT Security Administrator will categorize and file the reported email to support tracking and reporting activities. Also replies to the user who reported the suspicious email with a message reporting the determination and any recommendations.
• Under the direction of the Senior Manager, IT Security, utilize the Supernus KnowBe4 application to deploy periodic IT Security Training to all users such as Security Awareness Training, Privacy Training, etc.
• Concentrated effort to keep software and hardware on up-to-date security levels and patches.
• Maintaining situational awareness and keeping current with cyber security news and threat actor Tactics, Techniques, and Procedures (TTPs).
• Researching, condensing, and reporting on security bulletins and publicly identified threats.
• Assist coworkers where necessary, including but not limited to onboarding, training, investigations, reports, etc.
• Assists in performing technical assessments of information security incidents and provides necessary reporting and remediation actions.
• Adhere to and enforce security policies, procedures, and associated plans for system security administration and user system access based on industry-standard best practices.
• Collaborates with cross functional teams to define, design, and deliver new and enhanced security measures that meet the needs of the company, clients, and end-users.

Requirements:

• Bachelor's degree in Cyber/IT Security, Computer Science, Computer Engineering, or related field.
• 4+ years of IT security and system administration-related work experience or equivalency.
• Involved in the implementation of security software systems, applications, and related products.
• Software management best practices and troubleshooting experience.
• Working knowledge of policies, procedures, and protocols of a Security Operations Center.
• Demonstrated knowledge of applicable practices and laws relating to data privacy and protection.
• Basic knowledge of multiple security technologies such as SIEM, Intrusion Detection Systems, Endpoint security, Web Proxy/Content Filtering, Active Directory, PKI, Radius, Log Analysis, etc.
• Attention to detail and ability to use your initiative.
• Ability to work independently and as part of a team and maintain high ethical standards of integrity and quality.
• Good analytical thinker who possesses problem-solving skills that can visualize solutions and is capable of an innovative and dynamic approach to work.
• Ability to understand business objectives and focus to deliver success.