CYBERSECURITY ANALYST

Bounty Fresh Group Holdings Inc; Taguig; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Bounty Fresh Group Holdings Inc, based in Metro Manila, is seeking a Cybersecurity Analyst to monitor, detect, investigate and respond to threats across the organization's environment. The role combines Security Operations, Incident Response, Threat Intelligence, Vulnerability Management, Governance, Risk & Compliance, and Security Awareness responsibilities.

Responsibilities include monitoring SIEM/EDR/ND and firewalls, conducting incident triage and root-cause analysis, and developing

Qualifications

• Bachelor's degree in IT, CS, cybersecurity or related field.
• 2+ years in Security Operations Center (SOC) or security operations.
• Experience with SIEM platforms such as FortiSIEM, Splunk, or equivalents.
• Knowledge of Windows, Linux, Active Directory, networking and server administration.
• Familiar with NIST CSF and ISO 27001 frameworks and data privacy considerations.
• Strong analytical and documentation skills; excellent communication.

Responsibilities

• Monitor and investigate security events across SIEM, NDR, EDR/DR, firewalls, email and network security.
• Perform incident triage, containment, eradication, and recovery activities.
• Manage high-volume security event monitoring and threat analysis.
• Conduct root cause analysis and post-incident reviews.
• Develop and maintain detection rules, use cases, and playbooks.
• Conduct vulnerability assessments, penetration testing and risk analysis.
• Oversee deployment and verification of security patches.
• Support audits and maintain SOPs aligned with ISO 27001, NIST CSF/RMF, Data Privacy Act.
• Participate in internal and external audits; prepare security reports.
• Lead phishing simulations and security awareness campaigns.

Skills

SOC operations

Incident response

Threat intelligence

Vulnerability management

GRC

Security awareness

SIEM proficiency

Scripting

Analytical skills

Communication skills

Education

Bachelor's Degree in Information Technology, Computer Science, or Cybersecurity

Tools

FortiSIEM

Splunk

QRadar

Microsoft Sentinel

Nessus

Qualys

Job description

2 - 5 Years

GENERAL INFORMATION

Designation: Cybersecurity Analyst

Department: Corporate IT

Work Assignment: Office-based

JOB SUMMARY

Position description: The Cybersecurity Analyst is responsible for monitoring. detecting investigating, and responding to cybersecurity threats across the organization's environment. The role combines Security Operations, Incident Response, Threat Intelligence, Vulnerability Management, Governance, Risk & Compliance, and Security Awareness responsibilities.

1. Security Operations & Incident Response

• Monitor and investigate security events across SIEM, NDR, EDR/DR, firewalls, email security, and network security platforms.
• Perform incident triage, containment, eradication, and recovery activities.
• Manage high-volume security event monitoring and threat analysis.
• Conduct root cause analysis and post-incident reviews.
• Develop and maintain detection rules, use cases, and playbooks.

2. Vulnerability & Patch Management

• Conduct vulnerability assessments, penetration testing and risk analysis.
• Track remediation activities and validate corrective actions.
• Oversee deployment and verification of security patches.
• Support third-party security assessments and audits.
• Develop and maintain SOPs aligned with ISO 27001, NIST CSF/RMF, and the Data Privacy Act of the Philippines.
• Support cybersecurity governance initiatives and security maturity improvement programs.
• Participate in internal and external audits.
• Prepare technical and executive-level cybersecurity reports.

4. Threat Intelligence & Threat Hunting

• Monitor threat intelligence feeds and emerging cyber threats.
• Analyze Indicators of Compromise (IOCs) and attacker tactics, techniques, and procedures (TTPs).
• Perform proactive threat hunting activities.

5. Security Awareness

• Lead phishing simulation exercises and awareness campaigns.
• Promote cybersecurity best practices across the organization.

QUALIFICATIONS

• Bachelor's Degree in Information Technology, Computer Science, Cybersecurity, or related field
• Relevant cybersecurity certifications are an advantage
• Minimum of 2 years experience in Security Operations Center (SOC), Cybersecurity Operations, or Information Security
• Experience working with SIEM platforms such as FortiSEM, Splunk, or equivalent
• Experience in incident detection. investigation, and response
• Knowledge in Windows, Linux, Active Directory, networking, and server administration
• Understanding of common cyber attack techniques including phishing, malware, ransomware, brute force attacks, and DDoS Experience in log analysis and event correlation
• Familiar with cybersecurity frameworks and standards such as NIST CSF and ISO 27001
• Strong analytical and problem-solving skills
• Good understanding of cybersecurity concepts and incident handling prodflures
• Excellent oral and written communication skills
• Attention to detail and strong documentation skills
• Background in scripting Python, or PowerShell is an advantage
• SIEM: FortiSIEM, Splunk, QRadar, Microsoft Sentinel
• Security Analytics: FortiAnalyzer
• NDR: Trend Micro Deep Discovery Inspector
• Vulnerability Management: Nessus, Qualys, Rapid7
• Patch Management: Action1
• Compliance: ISO 27001, NIST RMF, NIST SP 800 Series
• Linux Administration and Network Security
• Google Workspace and Hybrid Infrastructure Security

PREFERRED CERTIFICATIONS

• CompTIA Security+
• CompTIA CySA+
• ISC2 CC
• ISC2 CISSP
• CEH
• GIAC

Job Snapshot

Updated Date

11/04/2026

Location