Cyber Security Analyst

ePLDT, Inc.; Makati; On-site; PHP 420,000 - 660,000; Full time

Job summary

ePLDT, Inc. is hiring for a Security Alert Triage role in Makati. You will monitor security alerts, analyze their severity, and prioritize responses using a predefined risk framework. Basic investigations and threat enrichment will be part of daily duties.

The candidate should have a Bachelor's degree in a cybersecurity-related field and 1–2 years of relevant experience. Onsite work with a 24/7 shift schedule is required.

Qualifications

• Bachelor's degree in computer science or related cybersecurity field.
• 1–2 years of working experience.
• Fundamental knowledge of cybersecurity concepts and frameworks.
• Knowledge of Service Management Framework, MITRE Framework, SIEM, SOAR, network and endpoint security tools.
• CompTIA Security+ or Blue Team certification is an advantage.
• Able to work onsite in Makati; 24/7 shifting schedule.

Responsibilities

• Continuously monitoring security alerts via SecOps and messaging apps (firewalls, IDS, etc.).
• Analyzing alerts for severity, legitimacy, and potential organizational impact.
• Prioritizing alerts based on a predefined risk assessment framework.
• Conducting basic investigations to gather additional context and evidence.
• Utilizing security tools and threat intelligence feeds to enrich incident understanding.
• Classifying incidents by predefined categories (phishing, malware, unauthorized access).
• Documenting incident details, including timeline and initial findings.
• Reporting incidents to security team leads and IT management.
• Implementing basic containment actions per playbooks for specific threats.

Skills

Cybersecurity concepts & frameworks

MITRE Framework

Security Operations

Incident response basics

Education

Bachelor's degree in computer science, Computer Engineering, Information Technology, Electronic and Communications Engineering, with cybersecurity specialization

Tools

SIEM

SOAR

Threat intelligence feeds

Endpoint security tools

Job description

Job Description:

Security Alert Triage

• Continuously monitoring security alerts generated by various security tools via SecOps and messaging apps (firewalls, intrusion detection systems, etc.)

• Analyzing alerts to determine their severity, legitimacy (potential false positives), and potential organizational impact.

• Prioritizing alerts based on a predefined risk assessment framework.

Initial Investigation

• Conducting basic investigations on prioritized alerts to gather additional context and evidence.

• Utilizing security tools and threat intelligence feeds to enrich their understanding of the incident.

Incident Classification and Reporting

• Classifying incidents based on predefined categories (e.g., phishing, malware, unauthorized access attempt).

• Documenting the incident details, including timeline, potential impact, and initial investigation findings.

• Reporting the incident to relevant internal stakeholders (security team leads, IT management).

Initial Containment

• Implementing basic containment actions based on the incident type (e.g., isolating compromised systems, disabling user accounts).

• This may involve following established playbooks or procedures for specific threats.

Job Qualifications:

Education: Bachelor's degree in computer science, Computer Engineering, Information Technology, Electronic and Communications Engineering, course with specialization in Cybersecurity, and another related course

Relevant Experience: With atleast 1-2 years of working experience andHas fundamental knowledge of Cybersecurity Concepts and Frameworks

Knowledge/Training: Service Management Framework, MITRE Framework, SIEM, SOAR, Network and Endpoint Security Tools

Certification/License: CompTIA Security+, Certified Blue Team, or any other Security Operations Related Certification is an advantage

Work Condition: Able to work onsite in Makati. The role will be part of a 24/7 shifting schedule.