Cybersecurity Analyst 1 - WFH (Nighshift)

Connext; Philippines; On-site; PHP 600,000 - 1,000,000; Full time

Benefits offered by this job

Competitive salary

Night differential 25%

20 annual leave credits

Health insurance

Dental & Life insurance

Job summary

Connext is seeking a Cyber Security Analyst 1 to monitor and investigate security alerts across email, SIEM, and endpoints. You will triage threats, conduct incident investigations, and develop response playbooks to minimize risks and business disruption.

You will perform proactive threat hunting, work with SIEM/EDR/MDR tools, and monitor cloud and network security. Clear English communication and independent incident management are essential.

Qualifications

• Has knowledge in incident response and digital forensics.
• Familiarity with VPNs, segmentation, and secure protocols.
• Proven ability to investigate security alerts and determine potential threats.
• Proven ability to perform root-cause analysis and assess security impact.
• Proven ability to communicate technical security findings clearly.
• Proven ability to work independently and manage multiple security incidents and priorities.
• Demonstrates strong analytical and problem-solving skills.
• Demonstrates strong experience in security monitoring and incident response.
• Clear and coherent both written and verbal communication skills in English.

Responsibilities

• Monitor and investigate email phishing, BEC, SIEM, and endpoint security alerts.
• Triage potential threats and escape incidents according to established security procedures.
• Conduct incident investigations, including evidence collection, root-cause analysis, and impact assessment.
• Develop and execute incident response playbooks to minimize security risks and business disruption.
• Perform proactive threat hunting to identify suspicious activity and emerging security risks.
• Work with security tools including SIEM, EDR, MDR, and business email security platforms.
• Monitor security environments across cloud and network infrastructure.
• Support incident containment, remediation, and follow-up activities.
• Document security incidents, investigation findings, actions taken, and recommended improvements.
• Communicate technical findings and security recommendations to technical and non-technical stakeholders.
• Identify opportunities to improve security monitoring, response processes, and automation.

Skills

Incident response

Digital forensics

Network security

Security monitoring

Threat hunting

Tools

SIEM

EDR

MDR

Barracuda

Proofpoint

Job description

There's a lot to love about Connext. Here are some of the reasons why:

• Competitive salary and bonuses
• 25% Night Differential Pay
• 20 Annual Leave Credits
• Health, dental, and life insurance

Job Summary

The Cyber Security Analyst 1 is responsible in monitoring and investigating security alerts, including phishing, business email compromise, SIEM, and endpoint incidents, to identify and respond to potential threats. The role supports incident response, threat hunting, root-cause analysis, and security remediation while communicating findings effectively with technical and non-technical stakeholders.

Job Description

• Monitor and investigate email phishing, Business Email Compromise (BEC), SIEM, and endpoint security alerts.
• Triage potential threats and escape incidents according to established security procedures.
• Conduct incident investigations, including evidence collection, root-cause analysis, and impact assessment.
• Develop and execute incident response playbooks to minimize security risks and business disruption.
• Perform proactive threat hunting to identify suspicious activity and emerging security risks.
• Work with security tools including SIEM, EDR, MDR, and business email security platforms.
• Monitor security environments across cloud and network infrastructure.
• Support incident containment, remediation, and follow-up activities.
• Document security incidents, investigation findings, actions taken, and recommended improvements.
• Communicate technical findings and security recommendations to technical and non-technical stakeholders.
• Identify opportunities to improve security monitoring, response processes, and automation.

Screening Criteria

• Minimum of three (3) years of experience in IT Security Operations, SOC, or a related cybersecurity role.
• Experience with Microsoft Office 365 and Azure.
• Experience with SIEM, EDR, and/or MDR security tools.
• Experience with email security platforms such as Barracuda or Proofpoint.
• Must have stable employment history.

Required Qualifications

• Has knowledge in incident response and digital forensics.
• Familiarity with network security concepts, including VPNs, segmentation, and secure protocols.
• Proven ability to investigate security alerts and determine potential threats.
• Proven ability to perform root-cause analysis and assess security impact.
• Proven ability to communicate technical security findings clearly.
• Proven ability to work independently and manage multiple security incidents and priorities.
• Demonstrates strong analytical and problem-solving skills.
• Demonstrates strong experience in security monitoring and incident response.
• Clear and coherent both written and verbal communication skills in English.