IT Security Specialist

Scan Global Logistics A/S; Muntinlupa; Ibrido; PHP 900.000 - 1.200.000; Tempo pieno

Descrizione del lavoro

Scan Global Logistics A/S is seeking an IT Security Analyst to monitor, detect, investigate, and respond to cybersecurity threats across the IT environment. The role emphasizes protecting email, endpoints, networks, and user accounts using SIEM, EDR, and CTI within a hybrid office.

With 5+ years in SOC or related fields, you will configure and tune analytic rules and alerts, coordinate incident recovery, and participate in a 24/7 shift and on-call rotation.

Competenze

• At least 5 years of experience in SOC operations, incident response, threat hunting, or cyber threat intelligence.
• Hands-on experience with SIEM platforms such as Microsoft Sentinel.
• Strong experience in Microsoft Defender.
• Experience creating and tuning analytic rules, detections, correlation logic, and alerting mechanisms.

Mansioni

• Monitor, detect, investigate, and respond to cybersecurity threats across the organization's IT environment.
• Focus on safeguarding email systems, endpoints, networks, and user accounts.
• Leverage SIEM, EDR, and CTI to identify threats, assess risks, and strengthen security posture.
• Participate in 24/7 shift schedule and on-call rotation within a hybrid office setup.

Conoscenze

SOC operations

Incident response

Threat hunting

KQL

Log analysis

EDR

SIEM

Cyber Threat Intelligence

Strumenti

Microsoft Sentinel

Microsoft Defender

Google SecOps SOAR

JIRA

Confluence

Descrizione del lavoro

The IT Security Analyst is responsible for monitoring, detecting, investigating, and responding to cybersecurity threats across the organization's IT environment. This role focuses on safeguarding email systems, endpoints, networks, and user accounts through proactive security monitoring and incident response activities. The analyst leverages Security Information and Event Management (SIEM) platforms, Endpoint Detection and Response (EDR) solutions, and Cyber Threat Intelligence (CTI) to identify emerging threats, assess risks, and strengthen the organization's security posture. The position requires expertise in log analysis and threat hunting using Kusto Query Language (KQL), as well as experience in investigating account compromise incidents and coordinating recovery efforts. Additionally, the analyst supports network security operations, including firewall administration, VPN management, web filtering, and traffic analysis. This role plays a key part in maintaining a secure and resilient IT environment and requires participation in a 24/7 shift schedule and on-call rotation while working within a hybrid office setup.

Minimum Qualifications:

• At least 5 years of experience in SOC operations, incident response, threat hunting, or cyber threat intelligence.
• Hands-on experience with SIEM platforms such as Microsoft Sentinel
• Strong experience in Microsoft Defender
• Experience creating and tuning analytic rules, detections, correlation logic, and alerting mechanisms.

Experience or familiarity with the following tools (optional but beneficial)

• Microsoft Sentinel
• Microsoft Defender (including Defender for Cloud Apps, Endpoint and Office 365)
• Google SecOps SOAR
• JIRA
• Confluence

Certificates (optional but beneficial)

• CompTIA Security+
• CompTIA CySA +
• Microsoft Certificates (SC-900 or SC-200)