Cybersecurity Analyst 1 - WFH (Nighshift)

Connext; Philippines; On-site; PHP 480,000 - 600,000; Full time

Benefits offered by this job

Night Differential 25%

Annual Leave 20 credits

Health, dental, and life insurance

Competitive salary and bonuses

Job summary

Connext in the Philippines is seeking a Cyber Security Analyst 1 to build a foundation across MSS technologies and protect customer networks from threats. You will monitor networks, servers, databases and endpoints for indicators of compromise and help configure security devices including firewalls and VPNs.

Join a team that responds to SIEM alerts, investigates incidents, remediates vulnerabilities, and stays current with IT security trends.

Qualifications

• Bachelor's degree in cyber security, IT, CS, or related field.
• 1–2 years in a SOC/Analyst role.
• Stable employment history.

Responsibilities

• Monitor MSS helpdesk and respond to tickets at 1st line level.
• Investigate SIEM alerts for potential breaches and incidents.
• Monitor network devices for status changes and alert customers.
• Install security measures and protect systems, including firewalls and encryption.
• Document and research breaches and assess damage.
• Collaborate with customer security teams to test and remediate vulnerabilities.
• Escalate to senior engineers when needed.
• Mentor teammates and share knowledge via calls.

Skills

Cybersecurity principles

Network security

Threat detection

Incident response

IP protocols knowledge

Communication skills

Analytical skills

Team collaboration

Education

Bachelor's degree in cyber security

Tools

QRadar

Splunk

AlienVault

Linux CLI

Job description

There's a lot to love about Connext. Here are some of the reasons why:

• Competitive salary and bonuses
• 25% Night Differential Pay
• 20 Annual Leave Credits
• Health, dental, and life insurance

Job Summary

The Cyber Security Analyst 1 will build a foundation across all aspects of MSS technologies. This role will help protect our customer networks against cybersecurity threats such as hackers, Cyber-terrorists and malware that can steal or corrupt sensitive customer data. This is accomplished by monitoring and analyzing customer networks, servers, databases and end-point equipment for key indicators of compromise and configuring customer networks and security devices such as switches, routers, wireless, firewalls and virtual private networks (VPNs).

Job Description

• Monitor the MSS helpdesk and react to new and existing tickets at a 1st line/Tier 1 level.
• Tackle all MSS tickets regardless of the technology stream the ticket focuses on.
• Respond to Security Incident and Event Management (SIEM) platform alerts by investigating and analyzing potential security breaches and cyber security incidents.
• Investigate monitoring alerts for network devices such as an interface up/down and alerting the customer appropriately.
• Monitor customer environments for security/network issues.
• Manage, monitor, and alert customer equipment.
• Install security measures and operate software to protect systems and information infrastructure, including firewalls and data encryption programs.
• Document and research security breaches and assess the damage they cause.
• Work with customers security team to perform tests and uncover network vulnerabilities.
• Help remediate detected vulnerabilities to maintain a high-security standard.
• Become current on IT security trends and news.
• Adhere to company-wide best practices for IT security.
• Research security enhancements and make recommendations to management.
• Stay up to date on information technology trends and security standards.
• Escalate tickets to more experienced engineers or 2nd Line team where appropriate.
• Train, mentor, and guide teammates through direct comms and by hosting knowledge transfer calls.

Screening Criteria

• Bachelor's degree in cyber security, information technology, computer science, computer engineering, or a related field.
• At least one (1) to two(2) years of working in a SOC/Analyst position.
• Must have stable employment history.

Required Qualifications

• Strong understanding of cybersecurity principles, network security, threat detection, and incident response.
• Ability to demonstrate an understanding of IP protocols like DHCP, FTP/SFTP, HTTPS/HTTPS, TCP/UDP, SSH etc.
• Proficiency in Cybersecurity frameworks, including but not limited to Mitre Att&ck, NIST (National Institute of Standards and Technology), and Lockhead Martin, with an ability to apply these frameworks in real-world scenarios for threat detection and mitigation.
• Strong problem-solving and analytical skills are essential for investigating security incidents and vulnerabilities.
• Clear and coherent in both written and verbal communication skills to communicate findings and recommendations to various stakeholders, including technical and non-technical individuals.
• Meticulous in monitoring and analyzing security data is vital for identifying potential threats and vulnerabilities.
• Staying updated on the latest cybersecurity threats, trends, and best practices is a must to adapt to evolving security challenges.
• Collaborative skills are important since security incidents often require working with other team members and departments.

Desired Qualifications

• Knowledgeable with vendor specific qualification such as Cisco CCNA, Juniper JNCIA, Palo Alto PCNSE, Splunk Certified User or IBM QRadar Certified Associate Admin.
• Experience in SIEM platforms – such as QRadar, Splunk or AlienVault etc.
• Experience in routing switching and firewalls – such as Cisco, Juniper, Palo Alto or Fortinet.
• Experience in working with command line interfaces of Linux operating systems.
• Investigating and troubleshooting IT issues.