Information Security Officer

Ubiquity; Bacolod; On-site; PHP 900,000 - 1,500,000; Full time

Job summary

Ubiquity in Bacolod City, Philippines, is seeking an Information Security Officer who embodies Head, Heart, Hustle. You will be a key member of the InfoSec team, acting as an internal triage analyst to assess security events and incidents while supporting PCI and SOC2 audits.

The role focuses on monitoring environments, providing mitigation strategies, and collaborating across teams to strengthen security. This is a work-from-office position that offers opportunities to learn, grow, and

Qualifications

• Bachelor's degree in Computer Science or related field, or equivalent work experience.
• Experience in security information technology and incident response teams (CIRT/SOC) or similar.
• Extensive experience in network security monitoring, packet analysis, host and server forensics.
• Prior SOC/CIRT or CERT experience desirable.
• Experience with SIEMs and security tooling such as Splunk/Exabeam/Rapid7 preferred.

Responsibilities

• Lead design and implementation of computer network security technologies and protections.
• Review and analyze security incident response activities and investigations.
• Identify vulnerabilities and rate severity by impact and exploitability.
• Conduct security risk assessments ensuring policy compliance and best practices.
• Communicate risks and mitigations to business lines.
• Triage requests and support incident investigations; assist engineers as needed.
• Respond to security incidents with forensics and root cause analyses.
• Continuously learn new aspects of the security domain.

Skills

Incident Analysis and Response

Networking and Systems Security

VAPT

Education

Bachelor's degree in Computer Science or related field

Tools

Splunk

Exabeam

Rapid7

ESET

CrowdStrike

Carbon Black

Cisco Umbrella

Job description

Job Description:

At Ubiquity, we live and breathe our mantra: Head, Heart, Hustle. This isn’t just a philosophy—it’s the foundation of who we are and what we do. As an Information Security Officer, you’ll embody this mantra every day, delivering exceptional service with expertise, empathy, and a drive to succeed.

The Information Security Officer is a supporting role and integral member to our InfoSec team. The ISO is an internal triage analyst who assesses security events and incidents. Monitors environments and reports analytics to management. It also plays an instrumental role supporting PCI and SOC2 audits by validating and mitigating the required controls and mitigations that are required by these frameworks.

Location: Bacolod City, Philippines
Work Mode: Work From Office
Role: Information Security Officer

What You'll Do

• Lead initiatives including the research, analysis, design, testing and implementation of computer network security and protection technologies for company information and network systems and applications.
• Review and analyze computer security incident response activities and technical investigations of information security related incidents.
• Identify vulnerabilities and associate those to a severity rating by deriving impact and ease of exploit.
• Conduct security risk assessments to ensure compliance with corporate information security policies and adherence to best practices.
• Communicate to the line of business on the inherent risks and providing meaningful mitigation strategies.
• Support company-wide security awareness efforts and train information owners in the appropriate use of information and in the implementation of necessary computer security controls and/or systems.
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals.
• Triage customer requests, apply playbook driven solutions, initiate potential incident investigations through assignment to support engineers and may assist the engineers with use web-based resources to determine if a given event is potentially real, or more importantly that it is benign.
• Respond to security incidents; perform forensics activities and root cause analyses.
• Continuously drive to learn new aspects of the security business.
  

What We're Looking For

Top Skills

• Incident Analysis and Response
• Strong networking and Systems Security skills
• VAPT – Vulnerability Assessments and Penetration Testing

Minimum Qualifications

• Bachelor's degree in Computer Science or related field, or equivalent work experience
• Relevant work experience preferably within security information technology
• Prior experience in Computer Incident Response team (CIRT)/Computer Emergency Response team (CERT), or a Security Operations Center (SOC)
• Extensive experience in network security monitoring, network packet analysis, host, and server forensics

Desired Qualifications

• Prior SIEM experience – Security Information & Event Management system, log aggregation and event notification tool experience such Splunk, Exabeam Rapid7.
• Knowledge or experience with other tools like ESET, Crowd strike, Carbon Black, Cisco Umbrella.
• CISSP, GSEC (SANS 401) certification is desirable.
• SANS certification such as GREM, GCFA, GREM, GNFA, ENCE or related also preferred
• Experience in industry well-known as well as open-source Network and/ Host forensic tools, OSINT.

Preferred Knowledge, Skills and Abilities

• Strong technical skills including malware reverse engineering, memory forensics, live response techniques, registry analysis
• Strong networking knowledge – TCP/IP protocols, OSI model, Firewalls and other networking devices
• Strong case management and forensic procedural skills
• Strong customer service skills and decision-making skills
• Good analytical skills – ability to analyze and think out of the box when working a security event
• Experience with scripting languages such as Python, Perl, PowerShell
• Self-motivated, methodical and detail oriented

Additional useful Skills And Experience

• Security basics
• Malware knowledge
• Firewalls and IDS/IPS
• Proxy and content filtering
• Windows and Active Directory
• Network and Security Auditing