Cybersecurity Analyst I: Threat Detection & IR

Connext; Philippines; On-site; PHP 600,000 - 1,000,000; Full time

Benefits offered by this job

Competitive salary

Night differential 25%

20 annual leave credits

Health insurance

Dental & Life insurance

Job summary

Connext is seeking a Cyber Security Analyst 1 to monitor and investigate security alerts across email, SIEM, and endpoints. You will triage threats, conduct incident investigations, and develop response playbooks to minimize risks and business disruption.

You will perform proactive threat hunting, work with SIEM/EDR/MDR tools, and monitor cloud and network security. Clear English communication and independent incident management are essential.

Qualifications

• Has knowledge in incident response and digital forensics.
• Familiarity with VPNs, segmentation, and secure protocols.
• Proven ability to investigate security alerts and determine potential threats.
• Proven ability to perform root-cause analysis and assess security impact.
• Proven ability to communicate technical security findings clearly.
• Proven ability to work independently and manage multiple security incidents and priorities.
• Demonstrates strong analytical and problem-solving skills.
• Demonstrates strong experience in security monitoring and incident response.
• Clear and coherent both written and verbal communication skills in English.

Responsibilities

• Monitor and investigate email phishing, BEC, SIEM, and endpoint security alerts.
• Triage potential threats and escape incidents according to established security procedures.
• Conduct incident investigations, including evidence collection, root-cause analysis, and impact assessment.
• Develop and execute incident response playbooks to minimize security risks and business disruption.
• Perform proactive threat hunting to identify suspicious activity and emerging security risks.
• Work with security tools including SIEM, EDR, MDR, and business email security platforms.
• Monitor security environments across cloud and network infrastructure.
• Support incident containment, remediation, and follow-up activities.
• Document security incidents, investigation findings, actions taken, and recommended improvements.
• Communicate technical findings and security recommendations to technical and non-technical stakeholders.
• Identify opportunities to improve security monitoring, response processes, and automation.

Skills

Incident response

Digital forensics

Network security

Security monitoring

Threat hunting

Tools

SIEM

EDR

MDR

Barracuda

Proofpoint

Job description

Connext is seeking a Cyber Security Analyst 1 to monitor and investigate security alerts across email, SIEM, and endpoints. You will triage threats, conduct incident investigations, and develop response playbooks to minimize risks and business disruption.

You will perform proactive threat hunting, work with SIEM/EDR/MDR tools, and monitor cloud and network security. Clear English communication and independent incident management are essential.