Cyber Security Analyst

Tenet Healthcare; Philippines; On-site; PHP 600,000 - 900,000; Full time

Job summary

Tenet Healthcare in the Philippines seeks a Threat Intelligence Analyst to perform OSINT research, enrich IoCs, and map threat data to campaigns for security teams and leadership. The role emphasizes clear, actionable intelligence with strong analytical rigor.

The position requires attention to detail and the ability to communicate complex findings through concise reports and briefings, using diagrams to illustrate networks and attack chains.

Qualifications

• Proficiency in Microsoft Visio and ability to create clear network diagrams and threat intel visuals.
• Solid understanding of the OSI model (7-layer) and mapping threats to layers.
• Working knowledge of IT and cybersecurity fundamentals.
• Ability to execute pre-written Python scripts for automation.
• Experience with OSINT threat research and IoC enrichment.
• Attention to detail and critical thinking to identify gaps and false positives.

Responsibilities

• Conduct OSINT / Threat Intel research on Indicators of Compromise (IoCs).
• Enrich IoCs (IP addresses, domains, file hashes, URLs) using public sources and feeds.
• Map IoCs to threat actors/campaigns and to MITRE ATT&CK framework.
• Produce threat intelligence reports and briefings with actionable insights.

Skills

Visio

Threat diagram creation

OSI model

IT & Cyber fundamentals

Python scripting

Tools

Python

Job description

• Proficiency in Microsoft Visio. Ability to create clear, professional network diagrams, attack flowcharts, threat actor timelines, and visual representations of IoC relationships or infrastructure mappings. Essential for communicating complex threat intelligence in reports and briefings.
• Knowledge of the OSI Model. Solid understanding of the 7-layer Open Systems Interconnection Model (developed by ISO in 1984) and how data flows through the layers (Physical to Application) during network communication. Critical for mapping threats to specific layers, troubleshooting network-based attacks, and analyzing how malware or adversaries exploit protocols at each stage.
• Fundamental Understanding of IT and Cyber Fundamentals. Working knowledge of core IT concepts (networks, operating systems, endpoints) and cybersecurity basics (threat vectors, vulnerabilities, defense-in-depth). Provides the foundation for interpreting raw data, contextualizing IoCs, and collaborating with SOC, incident response, and engineering teams.
• Ability to Execute a Python Script. Comfort executing pre-written Python scripts (no requirement to write or deeply understand code). Used for automating IoC enrichment, running OSINT tools, parsing threat feeds, or interacting with threat intelligence platforms.

Analytical & Investigative Skills

• Conduct Open-Source Intelligence (OSINT) / Threat Intel Research on Indicators of Compromise (IoCs)
• Skilled at systematically researching and enriching IoCs (IP addresses, domains, file hashes, URLs, behavioral patterns) using public sources, feeds, and tools. Includes collection, validation, correlation to threat actors/campaigns, and mapping to frameworks like MITRE ATT&CK.
• Critical Thinking and Ability to Question
• Strong analytical mindset to evaluate threat data, challenge assumptions, identify gaps in intelligence, and ask probing questions that uncover hidden connections or false positives in IoC research.
• Curiosity / Investigative Mindset
• Natural drive to dig deeper into anomalies, explore new threat sources, and pursue leads proactively. Key for threat hunting, campaign tracking, and turning raw data into actionable intelligence.
• Attention to Detail
• Precision in spotting subtle patterns, validating IoCs, documenting findings accurately, and avoiding errors in high-stakes intelligence products.

Operational & Personal Skills

• Ability to Adapt and Move Quickly – Motivated
• High adaptability to rapidly evolving threat landscapes, willingness to pivot between tasks, and self-motivation to deliver under time pressure (e.g., during active campaigns or zero-day disclosures).

Communication Skills

• Clear and Concise Writing Style
• Ability to produce professional, well-structured threat intelligence reports, briefings, and summaries that are easy for technical and non-technical stakeholders to understand. Focus on actionable insights without unnecessary jargon.