Hiring! Lead IT Security Analyst

Ascendion; Mandaluyong; Hybrid; PHP 1,800,000 - 3,000,000; Full time

Job summary

Ascendion is seeking an experienced cybersecurity professional to lead system security management in a hybrid Manila environment. The role administers vulnerability tools, analyzes risks, and coordinates remediation with system owners.

You will implement automation workflows, support installation reviews, and help maintain security documentation. The ideal candidate has a 10+ year cybersecurity background, strong communication, and the ability to work independently or in a team.

Qualifications

• Bachelor’s degree in Computer Science, IT, or related field.
• Minimum 10 years of cybersecurity/IT security experience.
• Good working knowledge of networks, Windows and Linux security, and web apps.
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team.
• Experience with vulnerability tools and security automation.
• Hybrid work arrangement: report onsite in Manila three times weekly.

Responsibilities

• Administer vulnerability assessment tools and baseline scans for networks.
• Analyze risk, review firewall rules, and propose hardening measures.
• Develop security automation workflows via APIs, scripting, and integrations.
• Assist in software installation review processes for end-users.
• Coordinate with admins and owners to validate and remediate findings.
• Track and report remediation activities; ensure timely closure of risks.
• Help update information security regulations and testing docs.

Education

Bachelor’s degree in Computer Science / IT

ITIL v4 or above

Cybersecurity certifications (Security+, CEH)

Cloud certifications (AZ-500 AZ-900)

Tools

Tenable One

Hadrian

Wiz

Tufin

ServiceNow

Github Copilot

Snyk

Ubuntu

MacOS

Win11

Job description

System Management

• Administer various vulnerability assessment and baseline tools such as Tenable One, Hadrian and Wiz, including creating vulnerability assessment, discovery, and baseline scans for networks.

Security Management

• Perform analysis, risk assessment, and prioritization of vulnerability findings across on-premises, cloud environments.
• Review perimeter and host-based firewall rules, identify security gaps, and recommend rule optimization and hardening measures.
• Develop and maintain security automation workflows through APIs, scripting, and platform integrations to improve operational efficiency.
• Assist in software installation review processes for end-users.
• Coordinate with system administrators and application owners to validate, remediate, and verify security vulnerabilities and control deficiencies.
• Track, manage, and report security remediation activities; escape overdue findings and ensure timely closure of identified risks.

Documentation and Reporting

• Assist in the development, update, or review of information security regulations and processes.
• Assist in writing business cases, proof-of-concept (PoC) criteria and testing documentation, and other related documents in support of IT security projects.
• Create, assign tickets, and follow up resolutions with appropriate system administrators

This section is used to describe what knowledge, skills and abilities are required to perform the daily task and duties bulletined above.

Qualifications:

Education and Work Experience

• Bachelor’s degree in Computer Science, Information Technology, or related field.
• Minimum of ten (10) years of cybersecurity, IT security compliance, or related experience.

Technical Knowledge

• Good working knowledge of computer networks, databases, Windows and Linux operating system security, and web applications.

Soft Skills

• Strong problem‑solving and analytical skills.
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team.

Tools/Software

• Tenable One, Wiz, Tufin, ServiceNow, Github Copilot, Hadrian, Snyk, Ubuntu, MacOS, Win11

Certification

• Must possess relevant certifications in ITIL (v4 or above), Cyber (ie Security+, CEH), and cloud (ie AZ‑500, or AZ‑900)

Work Arrangement:

• Hybrid, to report onsite three times a week.
• Work Schedule is from 8:00AM – 5:00PM Manila Time.