IT Security Administrator

Sourcefit; Quezon City; Remote; PHP 800,000 - 1,200,000; Full time

Job summary

Sourcefit is seeking an IT Security Administrator to safeguard information assets by monitoring security tools and analyzing alerts. The role involves rapid investigation of threats, email security handling, and supporting incident response.

Responsibilities include coordinating remediation across endpoints, web apps, and cloud, plus ongoing security awareness training for staff. The candidate should be proactive, detail-oriented, and uphold high integrity standards.

Qualifications

• Bachelor's degree in a related field and strong IT security foundation.
• Experience with security tools, incident response, and vulnerability management.
• Knowledge of data privacy, security policies, and best practices.

Responsibilities

• Monitor security tools and maintain situational awareness across platforms.
• Investigate security alerts and determine false positives or incidents.
• Coordinate remediation of vulnerabilities across endpoints, web apps, and cloud.
• Escalate security incidents to IT leadership and document actions taken.
• Review suspicious emails and conduct security awareness activities.

Skills

Attention to detail

Analytical thinking

Independent and team work

Effective communication

Education

Bachelor's degree in Cyber/IT Security, Computer Science, Computer Engineering, or related field

Tools

SIEM

Active Directory

Microsoft Entra ID

Job description

Job Summary:

The IT Security Administrator is responsible for safeguarding the organization’s information assets by monitoring, analyzing, and responding to security threats across a wide range of security tools and platforms. This role plays a critical part in maintaining situational awareness, investigating security alerts, managing reported suspicious emails, and ensuring systems remain compliant with security standards and best practices. Working closely with the Senior Manager of IT Security and other cross-functional teams, the IT Security Administrator supports daily security operations, contributes to incident response activities, assists with security awareness training, and helps enhance the company’s overall security posture. The ideal candidate is detail-oriented, proactive, technically skilled, and committed to upholding high standards of integrity and data protection.

Job Details

Work set up: Work from home

Schedule: Monday to Friday | 8 AM - 5 PM PH Time

Holiday: Will follow US holidays

Essential Duties & Responsibilities:

• Monitor the security tools implemented including but not limited to, CrowdStrike, Zscaler, Microsoft Defender, Tanium, Adaptive, Tenable, Office 365, Entra ID, and computer log files, etc., to maintain situational awareness.

• Investigate security alerts received by the external SOC (Security Operations Center). The investigation will make use of all tools and log files possible and will determine if the alert is a false positive, a security event, an actual attack, and/or a security incident. The investigation will answer and report on the who, what, where, when, and how of the occurrence. The investigation will report on any actions taken to contain and/or remediate the situation and any recommendations for further action.

• Utilize our enterprise vulnerability management platform to continuously assess, monitor, and coordinate the remediation of security vulnerabilities discovered across corporate endpoints, web applications, cloud environments, and internal networks.

• Escalate any security incident (the confidentiality, integrity, or availability of any information or information asset that is negatively impacted) to the IT Security Leadership and Director of IT Operations.

• Investigate all reported suspicious emails and determine whether the email is malicious, non-malicious, or legitimate. The IT Security Administrator will categorize and file the reported email to
  support tracking and reporting activities. Also replies to the user who reported the suspicious email with a message reporting the determination and any recommendations. support tracking and reporting activities. Also replies to the user who reported the suspicious email with a message reporting the determination and any recommendations.
  
• Utilize the company security awareness and testing application to deploy periodic IT Security Training to all users such as Security Awareness Training, Privacy Training, etc.
• Concentrated effort to keep software and hardware on up-to-date security levels and patches.
• Maintaining situational awareness and keeping current with cyber security news and threat actor Tactics, Techniques, and Procedures (TTPs).
• Researching, condensing, and reporting on security bulletins and publicly identified threats.
• Assist coworkers where necessary, including but not limited to onboarding, training, investigations, reports, etc.
• Assists in performing technical assessments of information security incidents and provides necessary reporting and remediation actions.
• Adhere to and enforce security policies, procedures, and associated plans for system security administration and user system access based on industry-standard best practices.
• Collaborates with cross-functional teams to define, design, and deliver new and enhanced security measures that meet the needs of the company, clients, and end-users.

Supervisory Responsibilities:

• N/A

Knowledge & Other Qualifications:

• Bachelor's degree in Cyber/IT Security, Computer Science, Computer Engineering, or related field.
• 4+ years of IT security and system administration-related work experience or equivalency.
• Involved in the implementation of security software systems, applications, and related products.
• Knowledge of Microsoft Entra ID (formerly Azure AD), including Entra ID Protection, configuring and auditing Conditional Access policies, managing modern authentication methods (MFA, passwordless, FIDO2), and enforcing identity governance.
• Software management best practices and troubleshooting experience.
• Working knowledge of policies, procedures, and protocols of a Security Operations Center.
• Demonstrated knowledge of applicable practices and laws relating to data privacy and protection.
• Basic knowledge of multiple security technologies such as SIEM, Intrusion Detection Systems, Endpoint security, Web Proxy/Content Filtering, Active Directory, PKI, Radius, Log Analysis, etc.

Other Characteristics:

• Attention to detail and ability to use your initiative.
• Ability to work independently and as part of a team and maintain high ethical standards of integrity and quality.
• Good analytical thinker who possesses problem-solving skills that can visualize solutions and is capable of an innovative and dynamic approach to work.
• Ability to understand business objectives and focus to deliver success.
  Customer-oriented with patience in assisting users and proactive in troubleshooting and problem resolution.
• Ability to quickly learn new or unfamiliar technology and products using documentation and internet resources, it is vital you keep up to speed with the latest in technical developments as the industry changes so fast.
• Dependable, reliable, and flexible, when necessary, with excellent time management skills.
• Maintain high ethical standards regarding data integrity and data security.
• Good communication skills being able to communicate via various methods including electronic, in person, or via telephone.
• Ability to consistently exhibit Supernus Values in interactions with employees at all levels of the organization, vendors, and others.
• Capable of performing other duties and responsibilities as assigned or directed by Management.