Cyber Defense Analyst: Threat Intel & Incident Response

Ul Solutions; Makati; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

Ul Solutions in Makati seeks a cybersecurity professional to monitor and protect enterprise data and systems. The role emphasizes incident documentation, trend analysis, and rapid alerting, leveraging Purview and Sentinel tools where available.

You will correlate events from diverse sources to assess threats, recommend environment improvements, and maintain ongoing situational awareness for leadership. Experience in data-driven security reporting is valued.

Qualifications

• Proficient in Windows operating systems with basic Linux/OSX familiarity.
• Ability to source data from multiple information sources to support intelligence and reporting.
• Apply cybersecurity principles to protect data and systems.

Responsibilities

• Document and upscale incidents including history, status, and impact for action.
• Perform cyber defense trend analysis and reporting.
• Perform event correlation to gain situational awareness of attacks.
• Recommend environment modifications based on exercise results or system changes.
• Provide timely detection, identification, and alerting of possible attacks and anomalies.
• Use cyber defense tools for continuous monitoring and analysis of system activity.
• Suggest vulnerability corrections for computing environments.
• Conduct research across diverse data sources to identify indicators and warnings.
• Notify managers and responders about suspected incidents with event history and status.
• Analyze and report security posture trends and external threat data sources.

Skills

Windows OS proficiency

Linux familiarity

OSX familiarity

Cybersecurity fundamentals

Data sourcing & analytics

Threat detection

Tools

Microsoft Purview

Microsoft Sentinel

Job description

Ul Solutions in Makati seeks a cybersecurity professional to monitor and protect enterprise data and systems. The role emphasizes incident documentation, trend analysis, and rapid alerting, leveraging Purview and Sentinel tools where available.

You will correlate events from diverse sources to assess threats, recommend environment improvements, and maintain ongoing situational awareness for leadership. Experience in data-driven security reporting is valued.