Cyber Security Analyst (Onsite - Alabang)

Concentrix Catalyst; Muntinlupa; Hybrid; PHP 600,000 - 900,000; Full time

Job summary

Concentrix Catalyst is seeking a hybrid Security Operations and Desktop Support professional to safeguard enterprise IT and OT environments. You will balance remote security monitoring with on-site technical support for office and industrial settings.

Key duties include monitoring security alerts, incident response, threat hunting, and managing Active Directory/Entra ID permissions while patching vulnerabilities across endpoints and servers.

Qualifications

• 2+ years in Cyber Security, SOC, or hybrid IT support.
• Manufacturing or industrial settings (OT, SCADA, or HMI) exposure preferred.
• Certifications preferred: Security+, CySA+, SC-200, AZ-500, or Network+.
• Strong analytical troubleshooting; ability to explain technical risks to non-technical stakeholders.

Responsibilities

• Security Ops (70%): Monitor, triage, and investigate security alerts (SIEM, EDR, Cloud). Lead incident response for phishing, malware, and unauthorized access.
• Desktop & Site Support (30%): Provide Level 2 technical support for workstations, industrial PCs (HMIs), and end-user hardware.
• Engineering & Hunting: Tune detection rules, perform proactive threat hunting using the MITRE ATT&CK framework, and assist with automation via PowerShell.
• Identity & Vulnerability: Manage Active Directory/Entra ID permissions and oversee vulnerability patching for endpoints and servers.
• Compliance: Maintain cyber hygiene and security standards across both office and manufacturing plant floors.

Skills

EDR/SIEM

Threat Hunting

Incident Response

Active Directory

Tools

CrowdStrike

Microsoft 365 Defender

SIEM platforms

Intune

SCCM

Azure

AWS

Rapid7

Qualys

Tenable

Entra ID

Job description

This is a hybrid role (Security Operations + Desktop Support) responsible for securing an enterprise-scale IT and Operational Technology (OT) environment. The position balances remote security monitoring with physical, on-site technical support for office and industrial plant settings.

Core Responsibilities

• Security Ops (70%): Monitor, triage, and investigate security alerts (SIEM, EDR, Cloud). Lead incident response for phishing, malware, and unauthorized access.
• Desktop & Site Support (30%): Provide Level 2 technical support for workstations, industrial PCs (HMIs), and end-user hardware.
• Engineering & Hunting: Tune detection rules, perform proactive threat hunting using the MITRE ATT&CK framework, and assist with automation via PowerShell.
• Identity & Vulnerability: Manage Active Directory/Entra ID permissions and oversee vulnerability patching for endpoints and servers.
• Compliance: Maintain cyber hygiene and security standards across both office and manufacturing plant floors.

Technical Skills & Tools

• EDR/SIEM: Hands-on experience with tools like CrowdStrike, Microsoft 365 Defender, and SIEM platforms.
• Infrastructure: Windows/M365 Admin, Active Directory, Entra ID, and endpoint management (Intune/SCCM).
• Cloud: Foundational knowledge of Azure and AWS security.
• Vulnerability Management: Familiarity with tools like Rapid7, Qualys, or Tenable.

Required Experience & Qualifications

• Experience: Minimum 2+ years in Cyber Security, SOC, or hybrid IT support.
• Environment: Prior experience in manufacturing or industrial settings is highly preferred (OT, SCADA, or HMI exposure).
• Certifications (Preferred): Security+, CySA+, SC-200, AZ-500, or Network+.
• Soft Skills: Strong analytical troubleshooting; ability to explain technical risks to non-technical stakeholders.