Information Security Officer | Bacolod

Ubiquity; Murcia; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Ubiquity’s Information Security Officer role is a hands-on, mission-driven position within our InfoSec team. You’ll triage security events, monitor environments, and support PCI and SOC2 audits through implementing controls.

You’ll lead security initiatives, perform incident analysis, vulnerability assessments, and collaborate with peers to mitigate risks and improve defenses. Ideal candidates have a CS degree, experience in CIRT/SOC, SIEM tools, and strong networking; certifications like

Qualifications

• Bachelor's degree in Computer Science or related field or equivalent work experience.
• Experience in a Computer Incident Response team (CIRT), CERT, or Security Operations Center (SOC).
• Extensive experience in network security monitoring, packet analysis, and forensics.
• SIEM experience with tools like Splunk or similar.
• Knowledge of firewalling, OSI model, and incident response processes.

Responsibilities

• Lead research, design, testing, and implementation of network security technologies.
• Review security incident responses and technical investigations.
• Identify vulnerabilities and assess impact and exploitability.
• Conduct security risk assessments to ensure policy compliance and best practices.
• Communicate risks and mitigation strategies to business units.
• Triage customer requests, perform playbook-driven responses, and support engineers.

Skills

Incident Analysis & Response

Networking & Systems Security

VAPT & Penetration Testing

Education

Bachelor's degree in Computer Science or related field

Tools

Splunk

Exabeam

Rapid7

ESET

CrowdStrike

Carbon Black

Cisco Umbrella

Job description

At Ubiquity, we live and breathe our mantra: Head, Heart, Hustle. This isn’t just a philosophy—it’s the foundation of who we are and what we do. As an Information Security Officer,you’ll embody this mantra every day, delivering exceptional service with expertise, empathy, and a drive to succeed.

The Information Security Officer is a supporting role and integral member to our InfoSec team. The ISO is an internal triage analyst who assesses security events and incidents. Monitors environments and reports analytics to management. It also plays an instrumental role in supporting PCI and SOC2 audits by validating and mitigating the required controls and mitigations that are required by these frameworks.

What You'll Do:

• Lead initiatives, including the research, analysis, design, testing, and
  implementation of computer network security and protection technologies for
  company information, network systems, and applications.
• Review and analyze computer security incident response activities and technical
  investigations of information security-related incidents.
• Identify vulnerabilities and associate those with a severity rating by deriving impact
  and ease of exploitation.
• Conduct security risk assessments to ensure compliance with corporate
  information security policies and adherence to best practices.
• Communicate to the line of business on the inherent risks and provide
  meaningful mitigation strategies.
• Support company-wide security awareness efforts and train information owners
  in the appropriate use of information and in the implementation of necessary
  computer security controls and/or systems.
• Collaborate and consult with peers, colleagues, and managers to resolve issues
  and achieve goals.
• Triage customer requests, apply playbook-driven solutions, and initiate potential
  incident investigations through assignment to support engineers, and may assist
  The engineers will use web-based resources to determine if a given event is
  potentially real, or more importantly, that it is benign.
• Respond to security incidents; perform forensics activities and root cause analyses.
• Continuously drive to learn new aspects of the security business.

What We're Looking For:

Top Skills:

• Incident Analysis and Response
• Strong networking and Systems Security skills
• VAPT – Vulnerability Assessments and Penetration Testing

Minimum Qualifications:

• Bachelor's degree in Computer Science or related field, or equivalent work
  experience
• Relevant work experience, preferably within security information technology
• Prior experience in a Computer Incident Response team (CIRT)/Computer
• Emergency Response team (CERT), or a Security Operations Center (SOC)
• Extensive experience in network security monitoring, network packet analysis,
  host, and server forensics

Desired Qualifications:

• Prior SIEM experience – Security Information & Event Management system, log
  aggregation and event notification tool experience such Splunk, Exabeam
  Rapid7.
• Knowledge or experience with other tools like ESET, Crowd strike, Carbon Black,
  Cisco Umbrella.
• CISSP, GSEC (SANS 401) certification is desirable.
  SANS certification such as GREM, GCFA, GREM, GNFA, ENCE or related also
  preferred
• Experience in industry, well-known as well as open-source Network and/ Host
  forensic tools, OSINT.

Preferred Knowledge, Skills and Abilities:

• Strong technical skills including malware reverse engineering, memory forensics,
  live response techniques, registry analysis
• Strong networking knowledge – TCP/IP protocols, OSI model, Firewalls and
  other networking devices
• Strong case management and forensic procedural skills
• Strong customer service skills and decision-making skills
• Good analytical skills – ability to analyze and think out of the box when working a
  security event
• Experience with scripting languages such as Python, Perl, and PowerShell
  Self-motivated, methodical, and detail-oriented

Additional useful Skills and Experience

• Security basics
• Malware knowledge
• Firewalls and IDS/IPS
• Proxy and content filtering
• Windows and Active Directory
• Network and Security Auditing