Cyber Security Analyst

Robinsons Retail Holdings Inc.; Quezon City; On-site; PHP 550,000 - 950,000; Full time

Job summary

Robinsons Retail Holdings Inc. is seeking a Security Analyst to investigate, contain, and refine the response to security incidents while prioritizing threats.

The role also involves threat hunting, root cause analysis, and preparing incident reports in alignment with current cybersecurity trends. Ideal candidates will have experience with security tools such as EDR, SIEM, and CASB, and hold relevant certifications.

Qualifications

• Threat hunting
• Incident response
• Root cause analysis
• MITRE ATT&CK, Cyber Kill Chain, and IR methodologies
• CompTIA Security+, CySA+, CEH, GIAC
• GCIH preferred but not required

Responsibilities

• Security Analyst investigate and contain security incidents, prioritize and escape them, and refine response processes.
• They also perform threat hunting, conduct root cause analysis, and prepare incident reports while staying updated on cybersecurity trends.

Tools

EDR

SWG

CASB

SIEM

IPS

Firewalls

IAM

PAM

SEG

DLP

Vulnerability Testing

Job description

Security Analyst investigate and contain security incidents, prioritize and escape them, and refine response processes. They also perform threat hunting, conduct root cause analysis, and prepare incident reports while staying updated on cybersecurity trends.

Job Qualifications

• Minimum of 3 to 5 years of experience with strong understanding of security protocols, principles, and practices.
• Experience with security tools and technologies such as Endpoint Detection and Response (EDR), Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), Security Information and Event Management (SIEM), Intrusion Prevention System (IPS), Firewalls, Identity and Access, Management (IAM), Privilege Access Management (PAM), Secure Email Gateway (SEG), Data Loss Prevention (DLP), Vulnerability Management and Penetration Testing.
• Understanding of MITRE ATT&CK, Cyber Kill Chain, and incident response methodologies.
• Relevant certifications such as CompTIA Security+, CySA+, Certified Ethical Hacker (CEH), GIAC
• Certified Incident Handler (GCIH) is preferred but not required.