IT Security Analysts

Bravissimo Resourcing Inc.; Pasig; Presencial; PHP 600.000 - 1.200.000; Jornada completa

Descripción de la vacante

Bravissimo Resourcing Inc. is seeking a cybersecurity professional to monitor and respond to security alerts, manage Defender-based security operations, and coordinate across endpoints, identities, and cloud environments.

You will support vulnerability management, threat detection, and incident response while aligning with established standards and regulatory requirements. The role emphasizes collaboration across technical and non-technical teams, with focus on continuous improvement,

Formación

• Practical knowledge of TCP/IP, firewalls, VPNs, DNS, DHCP, certificates and SSL/TLS.
• Hands-on experience with Microsoft Defender capabilities across endpoint, identity, email and cloud workloads, together with security monitoring, threat detection and incident response.
• Experience with vulnerability and exposure management using Qualys or Rapid7, including scanning, secure configuration assessment, prioritization and remediation tracking.
• An understanding of common attack techniques, supply chain threats and current and emerging cyber risks.
• Knowledge of the OWASP Top 10 and recognized cyber security principles.
• An understanding of the NIST Cybersecurity Framework and NIS Regulations.
• Experience working towards Cyber Essentials.
• The ability to maintain security policies, procedures, technical documentation and audit evidence.
• A methodical, risk-based approach to investigating issues, prioritizing actions and making proportionate decisions.
• The ability to analyze complex information and translate it into clear, business-relevant recommendations.
• Strong collaboration and influencing skills, with the ability to build trusted relationships across technical and non-technical teams.
• The ability to manage competing priorities, take ownership of security actions and support occasional out-of-hours requirements.

Responsabilidades

• Monitor and investigate alerts across Microsoft Defender and the wider Microsoft security stack, using Red Canary where applicable to extend detection and response capability, and coordinate incident response through to resolution.
• Configure, maintain and support Microsoft security technologies across endpoint, identity, email, cloud and SaaS environments, with the Defender suite serving as the core operational security platform.
• Support firewalls, VPNs, endpoint protection, email security, identity and access controls, vulnerability management and security monitoring platforms.
• Assess current and emerging cyber threats, including supply chain and third-party risks, and help improve the organization’s ability to detect and respond to them.
• Coordinate vulnerability assessments using Qualys or Rapid7, correlate findings with Microsoft security data, and work with system owners to prioritize and track remediation through to completion or formal risk acceptance.
• Review systems, applications, Microsoft Azure resources, cloud services and supplier environments for secure configuration and alignment with approved standards, using Wiz and relevant Microsoft Defender capabilities to identify and manage cloud risk.
• Support penetration tests, audits, assurance reviews and accreditation activities.
• Provide technical evidence and documentation for security policies, risk assessments, operational risk decisions and compliance requirements.
• Provide practical security guidance to technical teams, project stakeholders and suppliers, constructively supporting and challenging decisions where needed.
• Contribute to security incidents and other high-priority scenarios, applying sound judgement and communicating clearly under pressure.
• Identify opportunities to improve security services through upgrades, automation, AI-enabled capabilities and better operational processes.
• Work in agile ways, collaborating across teams and contributing to continuous improvement.
• You will also help maintain alignment with the NIST Cybersecurity Framework, applicable Network and Information Systems (NIS) Regulations, Cyber Essentials and other relevant organizational or regulatory requirements.

Conocimientos

Windows 10/11

Windows Server

Hyper-V

PowerShell

Azure

Entra ID

Microsoft Defender

Security operations

Herramientas

Intune

Windows Autopilot

SCCM/MECM

MDT

WDS

Jira Service Management

Confluence

Red Canary

Qualys

Rapid7

Wiz

Descripción del empleo

Working hours: Night Shift (US Client Alignment)

Qualifications

• Practical knowledge of TCP/IP, firewalls, VPNs, DNS, DHCP, certificates and SSL/TLS.
• Hands-on experience with Microsoft Defender capabilities across endpoint, identity, email and cloud workloads, together with security monitoring, threat detection and incident response.
• Experience with vulnerability and exposure management using Qualys or Rapid7, including scanning, secure configuration assessment, prioritization and remediation tracking.
• An understanding of common attack techniques, supply chain threats and current and emerging cyber risks.
• Knowledge of the OWASP Top 10 and recognized cyber security principles.
• An understanding of the NIST Cybersecurity Framework and NIS Regulations.
• Experience working towards Cyber Essentials.
• The ability to maintain security policies, procedures, technical documentation and audit evidence.
• A methodical, risk-based approach to investigating issues, prioritizing actions and making proportionate decisions.
• The ability to analyze complex information and translate it into clear, business-relevant recommendations.
• Strong collaboration and influencing skills, with the ability to build trusted relationships across technical and non-technical teams.
• The ability to manage competing priorities, take ownership of security actions and support occasional out-of-hours requirements.

Key Responsibilities

• Monitor and investigate alerts across Microsoft Defender and the wider Microsoft security stack, using Red Canary where applicable to extend detection and response capability, and coordinate incident response through to resolution.
• Configure, maintain and support Microsoft security technologies across endpoint, identity, email, cloud and SaaS environments, with the Defender suite serving as the core operational security platform.
• Support firewalls, VPNs, endpoint protection, email security, identity and access controls, vulnerability management and security monitoring platforms.
• Assess current and emerging cyber threats, including supply chain and third-party risks, and help improve the organization’s ability to detect and respond to them.
• Coordinate vulnerability assessments using Qualys or Rapid7, correlate findings with Microsoft security data, and work with system owners to prioritize and track remediation through to completion or formal risk acceptance.
• Review systems, applications, Microsoft Azure resources, cloud services and supplier environments for secure configuration and alignment with approved standards, using Wiz and relevant Microsoft Defender capabilities to identify and manage cloud risk.
• Support penetration tests, audits, assurance reviews and accreditation activities.
• Provide technical evidence and documentation for security policies, risk assessments, operational risk decisions and compliance requirements.
• Provide practical security guidance to technical teams, project stakeholders and suppliers, constructively supporting and challenging decisions where needed.
• Contribute to security incidents and other high-priority scenarios, applying sound judgement and communicating clearly under pressure.
• Identify opportunities to improve security services through upgrades, automation, AI-enabled capabilities and better operational processes.
• Work in agile ways, collaborating across teams and contributing to continuous improvement.
• You will also help maintain alignment with the NIST Cybersecurity Framework, applicable Network and Information Systems (NIS) Regulations, Cyber Essentials and other relevant organizational or regulatory requirements.

Competencies

• Windows 10/11, Windows Server, and Hyper-V
• Microsoft Intune, Windows Autopilot, Configuration Manager (SCCM/MECM), MDT, and WDS
• PowerShell, with additional scripting in Batch or Python
• Enterprise workstation and laptop hardware (e.g., Dell, HP, Lenovo), and NVIDIA and AMD GPUs
• Active Directory, Group Policy, Entra ID, Microsoft 365, and Microsoft Azure
• IT service management tools (e.g., Jira Service Management and Confluence

Experience

• Strong experience with a Microsoft-first security stack, including Microsoft Azure, Microsoft 365, Entra ID, Microsoft Defender and Microsoft Sentinel, with Defender positioned as the primary platform for security operations.
• Experience with complementary security tooling such as Red Canary for managed detection and response, Qualys or Rapid7 for vulnerability management, and Wiz for cloud security and exposure management.
• Third-party or supply chain security assessments and supplier risk management.
• Security audits, NIS compliance, assurance reviews or accreditation programmes.
• ITIL or experience working within an IT service management framework.
• Relevant certifications such as CompTIA Security+, CISSP, CISM, CISMP, SSCP, CCNA Security, or Microsoft and Palo Alto Networks security certifications.
• Experience in a regulated, safety-critical, financial services, transport, logistics or multi-site environment.
• An interest in using automation and AI to enhance security detection, analysis and response.