Information Security Officer

Ubiquity; Philippines; On-site; PHP 700,000 - 1,100,000; Full time

Job summary

Ubiquity is seeking an Information Security Officer to join our InfoSec team in the Philippines. The ISO will triage security events, monitor environments, and support PCI and SOC2 audits by validating required controls and mitigations.

You will lead research and implementation of security technologies, analyze incidents, conduct risk assessments, and communicate risks with mitigations to the business. Continuous learning is encouraged.

Qualifications

• Bachelor's degree in Computer Science or related field or equivalent work experience.
• Experience in security information technology.
• Experience in CIRT/CERT or SOC.
• Extensive experience in network security monitoring and forensics.

Responsibilities

• Lead initiatives to design and implement security technologies for company information and networks.
• Review security incidents and investigations of information security related events.
• Identify vulnerabilities and rate severity by impact and exploitability.
• Conduct security risk assessments to ensure policy compliance and best practices.
• Communicate risks to business units with meaningful mitigations.
• Support security awareness and train owners on proper controls and systems.
• Collaborate with peers and managers to resolve issues and achieve goals.
• Triage customer requests and initiate incident investigations with support engineers.
• Respond to incidents with forensics activities and root cause analysis.
• Continuously learn new aspects of the security domain.

Skills

Incident Analysis & Response

Networking & Security

VAPT (Vulnerability Assessments)

Education

Bachelor's degree in Computer Science or related field

Job description

At Ubiquity, we live and breathe our mantra: Head, Heart, Hustle. This isn’t just a philosophy—it’s the foundation of who we are and what we do. As an Information Security Officer , you’ll embody this mantra every day, delivering exceptional service with expertise, empathy, and a drive to succeed.

The Information Security Officer is a supporting role and integral member to our InfoSec team. The ISO is an internal triage analyst who assesses security events and incidents. Monitors environments and reports analytics to management. It also plays an instrumental role supporting PCI and SOC2 audits by validating and mitigating the required controls and mitigations that are required by these frameworks.

What You'll Do:

• Lead initiatives including the research, analysis, design, testing and
  implementation of computer network security and protection technologies for company information and network systems and applications.
• Review and analyze computer security incident response activities and technical investigations of information security related incidents.
• Identify vulnerabilities and associate those to a severity rating by deriving impact and ease of exploit.
• Conduct security risk assessments to ensure compliance with corporate information security policies and adherence to best practices.
• Communicate to the line of business on the inherent risks and providing meaningful mitigation strategies.
• Support company-wide security awareness efforts and train information owners in the appropriate use of information and in the implementation of necessary computer security controls and/or systems.
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals.
• Triage customer requests, apply playbook driven solutions, initiate potential incident investigations through assignment to support engineers and may assist the engineers with use web-based resources to determine if a given event is potentially real, or more importantly that it is benign.
• Respond to security incidents; perform forensics activities and root cause analyses.
• Continuously drive to learn new aspects of the security business.

What We're Looking For:

Top Skills:

• Incident Analysis and Response
• Strong networking and Systems Security skills
• VAPT – Vulnerability Assessments and Penetration Testing

Minimum Qualifications:

• Bachelor's degree in Computer Science or related field, or equivalent work
• Relevant work experience preferably within security information technology
• Prior experience in Computer Incident Response team (CIRT)/Computer Emergency Response team (CERT), or a Security Operations Center (SOC)
• Extensive experience in network security monitoring, network packet analysis, host, and server forensics

Desired Qualifications:

• Prior SIEM experience – Security Information & Event Management system, log aggregation and event notification tool experience such Splunk, Exabeam Rapid7.
• Knowledge or experience with other tools like ESET, Crowd strike, Carbon Black, Cisco Umbrella.
• CISSP, GSEC (SANS 401) certification is desirable.
• SANS certification such as GREM, GCFA, GREM, GNFA, ENCE or related also preferred
• Experience in industry well-known as well as open-source Network and/ Host forensic tools, OSINT.

Preferred Knowledge, Skills and Abilities:

• Strong technical skills including malware reverse engineering, memory forensics, live response techniques, registry analysis
• Strong networking knowledge – TCP/IP protocols, OSI model, Firewalls and other networking devices
• Strong case management and forensic procedural skills
• Strong customer service skills and decision-making skills
• Good analytical skills – ability to analyze and think out of the box when working a security event
• Experience with scripting languages such as Python, Perl, PowerShell
• Self-motivated, methodical and detail oriented

Additional useful Skills And Experience

• Security basics
• Malware knowledge
• Firewalls and IDS/IPS
• Proxy and content filtering
• Windows and Active Directory
• Network and Security Auditing