Cyber Hygiene (Security)

Hammerjack Pty Ltd; Philippines; Hybrid; PHP 1,200,000 - 1,800,000; Full time

Job summary

Hammerjack Pty Ltd in Pasig is seeking a Lead IT Analyst – Cyber Hygiene (Security) to lead vulnerability and risk management across client environments. This hybrid role requires a mid to senior professional with strong collaboration across IT and security teams.

The successful candidate will manage scans, review firewall rules, and drive security automation. A 10-year security background and relevant certifications are preferred.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Minimum of ten (10) years of cyber security, IT security compliance, or related experience.

Responsibilities

• Administer vulnerability assessment and baseline tools including Tenable One, Hadrian and Wiz, and run scans for client networks.
• Perform analysis, risk assessment, and prioritization of findings across on-premises and cloud environments; review firewall rules and hardening measures.
• Develop and maintain security automation workflows via APIs and scripting; assist in software installation review processes.
• Coordinate with system admins to validate, remediate, and verify vulnerabilities; track and report remediation activities.

Skills

Cyber security

Vulnerability management

Risk assessment

Communication

Team collaboration

Education

Bachelor's degree in CS/IT

Tools

Tenable One

Wiz

Tufin

ServiceNow

GitHub Copilot

Hadrian

Snyk

Ubuntu

MacOS

Win11

Job description

Role - Lead IT Analyst – Cyber Hygiene (Security)

Level : Mid or Senior (10 years of experience)

Location - Pasig

Work setup - Hybrid (3 Day reporting to office)

Shift - Day shift

Roles and responsibilities

1. System Management:

• Administer various vulnerability assessment and baseline tools such as Tenable One, Hadrian and Wiz, including creation of vulnerability assessment, discovery, and baseline scans for client's networks.

2. Security Management:

• Perform analysis, risk assessment, and prioritization of vulnerability findings across on-premises, cloud environments.
• Review perimeter and host-based firewall rules, identify security gaps, and recommend rule optimization and hardening measures.
• Develop and maintain security automation workflows through APIs, scripting, and platform integrations to improve operational efficiency.
• Assist in software installation review processes for end-users.
• Coordinate with system administrators and application owners to validate, remediate, and verify security vulnerabilities and control deficiencies.
• Track, manage, and report security remediation activities; escalates overdue findings and ensure timely closure of identified risks.

3. Documentation and Reporting:

• Assist in the development, update, or review of information security regulations and processes.
• Assist in writing business cases, proof-of-concept (PoC) criteria and testing documentation, and other related documents in support of IT security projects.
• Create, assign tickets, and follow up resolutions with appropriate system administrators.

Requirement & Qualification

Education and Work Experience

• Bachelor's degree in Computer Science, Information Technology, or related field.
• Minimum of ten (10) years of cyber security, IT security compliance, or related experience.

Technical Knowledge

• Good working knowledge of computer networks, databases, Windows and Linux operating system security, and web applications.

Soft Skills

• Strong problem-solving and analytical skills.
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team.

Tools/Software

• Tenable One, Wiz, Tufin, ServiceNow, Github Copilot, Hadrian, Snyk, Ubuntu, MacOS, Win11

Certification

• Must possess relevant certifications in ITIL (v4 or above), Cyber (ie Security+, CEH), and cloud (ie AZ-500, or AZ-900)