Cybersecurity Defense Analyst

UL, LLC; Makati; On-site; PHP 600,000 - 900,000; Full time

Job summary

UL Solutions, a global leader in safety science, seeks a cybersecurity professional to monitor, detect, and respond to cyber threats. You will analyze security posture, coordinate with incident responders, and perform threat intelligence duties to protect enterprise data and systems.

The role requires 2+ years in cybersecurity, knowledge of ISO27001, and experience with Purview and Defender. Strong English skills and a proactive security mindset are essential.

Qualifications

• Good understanding of Windows OS; Linux/OSX beneficial.
• Ability to source data from multiple sources to support intelligence and planning.
• Apply cybersecurity principles to protect data and systems.
• Experience with Purview tooling and Defender is preferred.
• Identify and document incidents with history, status, and potential impact.
• Perform cyber defense trend analysis and reporting.
• Correlate events from diverse sources to gauge attack effectiveness.
• Plan modifications based on exercise results or system changes.
• Provide timely detection, identification, and alerting of possible attacks.
• Use cyber defense tools for continuous monitoring and analysis.

Responsibilities

• Audit, analyze, and report on UL Solutions’ security posture.
• Provide timely detection and alerting of potential attacks or intrusions.
• Monitor cyber defense tools for continuous system activity analysis.
• Analyze security posture trends across the organization.
• Conduct log analysis to identify malicious activity and anomalies.
• Support threat hunting and threat intelligence gathering.
• Assist with investigations and ensure vulnerability compliance.
• Coordinate with managers and responders for suspected incidents.

Skills

Windows OS

Linux/OSX knowledge

Cybersecurity principles

Data sourcing

Purview tooling

Microsoft Defender

Threat intelligence

Vulnerability management

Incident documentation

Event correlation

Threat hunting

Policy enforcement

Log analysis

DLP & Insider risk

Stakeholder communication

Security posture analysis

Threat reporting

Data research

Security certifications

Education

High School diploma or equivalent

Tools

Microsoft Purview

Microsoft Defender

Job description

• Technical Skills Required:

• The individual must have a good understanding of the Windows operating system. Knowledge or experience of Linux and OSX would be beneficial but is not essential.

• They must be able to utilize sources of information and tools to accurately and completely source all data used in intelligence, assessment, and planning to produce presentations and reports.

• They can apply cybersecurity principles to organizational requirements, ensuring the confidentiality, integrity, availability, authentication, and non-repudiation of the organization’s data and systems.

• Familiarity with Microsoft Purview tools and ideally Sentinel.

  Specialized Skills Required:

• Document and elevate incidents (including event's history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.

• Perform cyber defense trend analysis and reporting.

• Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack.

• Plan and recommend modifications or adjustments based on exercise results or system environment.

• Provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities.

• Use cyber defense tools for continual monitoring and analysis of system activity to identify malicious activity.

• Recommend computing environment vulnerability corrections.

• Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings).

• Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event's history, status, and potential impact for further action.

• Analyze and report organizational security posture trends.

• Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat conditions and determine which security issues may have an impact on the enterprise.

• Provides cybersecurity recommendations to leadership based on significant threats and trends.

• Work with stakeholders to resolve computer security incidents and vulnerability compliance.

• Audit, analyze, and report on the security of UL Solutions, supporting processes and systems.

• Discover and perform analysis to resolve complex security-related problems.

• Support investigations and research for possible computer security-related violations.

• Conduct log analysis to identify malicious activity and anomalous behavior.

• Support the planning, design, enforcement and auditing of security policies and procedures

• Cyber Defense Operational activity including:

• Investigating and responding to DLP alerts.

• Investigating and responding to Insider Risk management alerts.

• Insider threat monitoring.

• Metrics gathering and management.

• Gather, process and report on Threat Intelligence.

• Assist with Threat-hunting services.

• Prepares reports, which include recommendations and supporting arguments.

• Assists in developing and delivering presentations of reports. May present reports to small groups within a subunit(s)

• Performs other duties as directed.

• High School graduate or above.

• Excellent spoken and written English.

• 2+ years of work experience in Cyber Security.

• Experience in Threat Intelligence or Vulnerability Management

• Knowledge of ISO27001 or other global security standards.

• Experience with Microsoft Purview tooling.

• Experience with Microsoft Defender.

• Security Certification is an advantage.

A global leader in applied safety science, UL Solutions (NYSE: ULS) transforms safety, security and sustainability challenges into opportunities for customers in more than 110 countries. UL Solutions delivers testing, inspection and certification services, together with software products and advisory offerings, that support our customers’ product innovation and business growth. The UL Mark serves as a recognized symbol of trust in our customers’ products and reflects an unwavering commitment to advancing our safety mission. We help our customers innovate, launch new products and services, navigate global markets and complex supply chains, and grow sustainably and responsibly into the future. Our science is your advantage.

UL LLC has been and will continue to be an equal opportunity employer. To assure full implementation of this equal employment policy, we will take steps to assure that:

Persons are recruited, hired, assigned and promoted without regard to race, color, age, sex or gender, sexual orientation, gender identity, gender expression, transgender status, religion, creed, national origin, ethnicity, citizenship, ancestry, disability, genetic information, military or veteran status, pregnancy, marital or familial status, or any other protected category under applicable law.