Cybersecurity Defense Analyst

UL Solutions External Career Site; Makati; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

UL Solutions External Career Site is looking for a cybersecurity professional to strengthen our defense in depth. The role emphasizes documenting and upscaling incidents, conducting trend analysis, and correlating events to understand attack effectiveness, while ensuring timely detection and alerting of potential threats.

The successful candidate will monitor external data sources for threat conditions, report security posture trends, and collaborate with leadership to implement vulnerability

Qualifications

• Experience with Windows OS; Linux/OSX familiarity is a plus.
• Ability to source information for intelligence reports and presentations.
• Apply cybersecurity principles to protect data and systems.
• Familiarity with Purview and Sentinel is preferred.
• Strong analytical and reporting skills.

Responsibilities

• Document and upscale incidents with history, status, and impact.
• Perform cyber defense trend analysis and reporting.
• Perform event correlation to assess attack effectiveness.
• Plan modifications based on exercise results or system environment.
• Provide timely detection and alerting of possible attacks.
• Use cyber defense tools for monitoring and analysis of system activity.
• Recommend vulnerability corrections.
• Research and correlate across diverse data sets.
• Notify managers and responders of suspected incidents and their history/status.
• Analyze security posture trends.
• Monitor external data sources for threat conditions.
• Provide leadership with cybersecurity recommendations based on threats and trends.
• Work with stakeholders to resolve incidents and vulnerability compliance.

Skills

Windows OS knowledge

Linux/OSX familiarity

Cyber defense principles

Data sourcing & reporting

Purview/Sentinel familiarity

Incident response awareness

Threat monitoring

Tools

Microsoft Purview

Sentinel

SIEM capabilities

Job description

Technical Skills Required:

• The individual must have a good understanding of the Windows operating system. Knowledge or experience of Linux and OSX would be beneficial but is not essential.
• They must be able to utilize sources of information and tools to accurately and completely source all data used in intelligence, assessment, and planning to produce presentations and reports.
• They can apply cybersecurity principles to organizational requirements, ensuring the confidentiality, integrity, availability, authentication, and non-repudiation of the organization’s data and systems.
• Familiarity with Microsoft Purview tools and ideally Sentinel.

Specialized Skills Required:

• Document and upscale incidents (including event's history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.
• Perform cyber defense trend analysis and reporting.
• Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack.
• Plan and recommend modifications or adjustments based on exercise results or system environment.
• Provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities.
• Use cyber defense tools for continual monitoring and analysis of system activity to identify malicious activity.
• Recommend computing environment vulnerability corrections.
• Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings).
• Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event's history, status, and potential impact for further action.
• Analyze and report organizational security posture trends.
• Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat conditions and determine which security issues may have an impact on the enterprise.
• Provides cybersecurity recommendations to leadership based on significant threats and trends.
• Work with stakeholders to resolve computer security incidents and vulnerability compliance.