IT Operations Security Analyst w/ GRC Exp| Midshift | Hybrid

Infinit-O; Pasay; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Infinit-O in the Philippines is seeking a seasoned Security Analyst to serve as a security incident responder and safeguard our digital assets across client environments. You will coordinate with IT and security teams to respond to incidents, assess risks, and strengthen defenses in a fast-paced setting.

The ideal candidate has 5+ years in network/system administration and IT security, hands-on experience with SIEM, IDS/IPS, and vulnerability scanners, plus relevant certifications.

Qualifications

• Must have practical experience in security analysis, incident handling, and threat intelligence.
• Experience with security tools such as SIEM, antivirus programs, and intrusion detection/prevention systems, and vulnerability scanners.
• At least 5 years of experience working as a Network/Systems administrator or equivalent.
• At least 3 years working on IT security administration or equivalent.

Responsibilities

• Serve as security incident responder and coordinate issue resolution.
• Perform system risk and vulnerability assessments and ensure security standards.
• Conduct internal and external penetration testing to identify improvements.
• Review systems and processes to identify security gaps.
• Collaborate on incident response planning and procedures.

Skills

Incident response

Vulnerability assessment

Penetration testing

Risk assessment

SIEM

IDS/IPS

Security tooling

Technical documentation

Certifications (CISSP/CEH/OSCP)

Scripting (Bash/PowerShell)

Tools

SIEM systems

Antivirus software

Vulnerability scanners

IDS/IPS tools

Incident response tools

Job description

Infinit-O isn’t just about business process optimization, we’re about people. For over 20 years, we’ve been helping some of the world’s fastest-growing companies in Financial Services, Healthcare, and Technology achieve multiple strategic advantages through data-driven solutions, high-performance teams, and cutting-edge technology. Our world-class Net Promoter Score of 75 reflects our commitment to excellence and client satisfaction.

But what truly sets us apart is our culture. At Infinit-O, we believe that diversity, equity, and inclusion are the foundation of innovation and sustainable growth. We embrace differences, empower perspectives, and create equal opportunities for everyone. Our people-first approach has earned us the Great Place To Work Certification three times, and as a B Corp Certified company, we’re dedicated to making a positive impact not just in business, but in the communities we serve.

With a highly engaged and innovative team, we don’t just optimize processes, we also create meaningful change.

• Serve as a security incident responder, coordinating with the necessary team to address issues.

• Conduct regular systems risk and vulnerability assessments, monitor progress, and ensure compliance with current security standards.

• Conduct internal and external penetration tests, to assess the effectiveness of security measures and identify areas for improvement.

• Conduct systems and processreview / audits and identify security gaps.

• Collaborate with the IT security head to review or develop an incident response plan that outlines procedures for identifying, responding to, and recovering from security incidents.

Requirements

• Technical Skills:

  • Strong analytical and problem-solving skills

  • Knowledge of security technologies, including firewalls, intrusion detection systems, encryption, and incident response

  • Experience with security software and tools

  • Ability to write clear and concise technical documentation

  • Ability to work independently and as part of a team

  • Certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Offensive Security Certified Professional (OSCP) are a plus.

  • Familiarity with scripting languages (Bash, PowerShell) for automating tasks is a plus.

• Soft Skills:

  • Excellent communication and interpersonal skills for conveying security risks and incidents to both technical and non-technical stakeholders.

  • Ability to work under pressure

  • Strong ethical and legal judgment

  • Commitment to lifelong learning

• Experience:

  • Must have practical experience in security analysis, incident handling, and threat intelligence.

  • Must have experience with security tools such as SIEM (Security Information and Event Management) systems, antivirus programs, and intrusion detection/prevention systems, and vulnerability scanners.

  • At least 5 years of experience working as a Network/Systems administrator or equivalent

  • At least 3 years working on IT security administration or equivalent