IT Security Operations Analyst

Work Schedule : Monday to Friday Regular Day Shift.

Work Setup: Hybrid (4x a week Onsite)

Contract Duration: 6 months (Extendable)

Location: Pasig City

Job Description: IT Security Operations Analyst

The IT Security Operations Analyst plays a critical role in safeguarding the organization's information systems and data. This role focuses on monitoring security systems, detecting and responding to threats, enforcing IT security policies, and implementing protective technologies. The ideal candidate will bring deep expertise in endpoint security, identity access management, BYOD enforcement, Microsoft Intune, and Security Operations Center (SOC) practices.

Key Responsibilities

Incident Response

• Monitor, investigate, and respond to security incidents (e.g., malware infections, data breaches) to ensure timely resolution.
• Conduct root cause analysis and recommend preventive measures.

Security Operations Center (SOC)

• Collaborate with vendors and partners in SOC activities including event monitoring, log analysis, and threat detection.
• Coordinate incident response efforts to maintain a strong security posture.

Vulnerability Assessment & Remediation

• Perform regular vulnerability scans and assessments.
• Work with internal teams and vendors to address findings and ensure remediation.

Policy Development & Enforcement

• Develop, implement, and enforce IT security policies, procedures, and guidelines.
• Ensure all systems, devices, and users comply with established security standards.

Compliance & Auditing

• Ensure adherence to industry regulations, standards, and best practices.
• Support internal and external security audits.

Risk Management

• Identify security risks, conduct assessments, and implement risk mitigation strategies.

Mobile Device Management (MDM)

• Implement and administer MDM solutions (e.g., Microsoft Intune).
• Secure organizational laptops, mobile devices, and enforce BYOD standards.

BYOD Policy Management

• Design and enforce BYOD policies to safeguard organizational data.
• Implement necessary tools to ensure compliance while maintaining system performance.

Cybersecurity Awareness

• Conduct employee security awareness programs and phishing simulations.
• Track and report progress on organizational security culture and awareness.

Threat Intelligence & Research

• Stay updated on emerging threats, vulnerabilities, and technologies.
• Conduct research to enhance existing security measures.

Collaboration

• Partner with other business units to integrate security into processes and systems.
• Assess risks of new systems and applications before production launch.

Vendor Management

• Manage relationships with security vendors and service providers.
• Evaluate new technologies and solutions to strengthen defenses.

Qualifications

Education

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related field.

Professional Experience

• 3–5 years of experience in IT security operations, with hands-on involvement in incident response, policy enforcement, and vulnerability management.

Technical Skills

• Incident Response:
  Skilled in security event monitoring and incident handling.
• SOC Practices:
  Familiar with SOC operations and tools.
• MDM:
  Experience with Microsoft Intune or equivalent solutions.
• Vulnerability Management:
  Proficiency in detection, assessment, remediation, and penetration testing.
• Endpoint Protection:
  Familiar with tools such as Trend Micro, CrowdStrike.
• Vulnerability Tools:
  Experience with SSC, Tenable, or similar.
• Network Security:
  Solid understanding of network security principles and technologies.

Certifications (Preferred)

• CISSP, CISM, CEH, CompTIA Security+, or other recognized industry certifications.

Soft Skills

• Strong analytical and investigative skills.
• Excellent written and verbal communication.
• Effective collaboration and stakeholder engagement.
• Attention to detail with high integrity and sound judgment.
• Strong project planning, organization, and time management skills.