Junior IT Security Analyst | Alert Triage & Incident Review

CallTek; Cebu City; On-site; PHP 200,000 - 360,000; Full time

Job summary

CallTek is seeking an Entry-Level IT Security Analyst to provide first-line review and analysis of alerts from Wazuh, Bitdefender, and approved tools. You will validate context, review logs, inspect devices, gather evidence, and follow defined incident-management procedures.

The role works under the IT Security Manager, handling containment, escalation, and remediation steps while protecting sensitive information and adhering to procedures.

Qualifications

• Associate's or bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related discipline, or equivalent technical education, laboratory training, certification study, internship, or practical experience
• Zero to two years of experience in IT support, desktop support, system administration, networking, NOC, SOC, managed services, cybersecurity operations, or a related technical environment; qualified entry-level candidates are encouraged
• Basic IT knowledge is required, including Windows endpoints, computer hardware, applications, user accounts, permissions, file systems, services, remote support, software installation, patching, IP addressing, DNS, and common network concepts
• Basic security knowledge is required, including malware, phishing, endpoint protection, event logs, indicators of compromise, vulnerabilities, patching, least privilege, account security, data protection, and incident-response fundamentals
• Ability to read alerts and logs, follow written procedures, perform careful equipment inspection, document technical findings clearly, and elevate when evidence is incomplete or risk is uncertain
• Strong attention to detail, professional judgment, confidentiality, integrity, and willingness to work with sensitive company, employee, client, or system information under approved access controls
• Ability to communicate clearly with security, help desk, infrastructure, network, managed services, operations, and non-technical users while remaining factual, respectful, and calm during incidents

Responsibilities

• Review assigned security alerts and notifications consistently, acknowledge them promptly, and prevent unresolved events from aging without ownership
• Gather relevant facts from Wazuh, Bitdefender, operating-system logs, ticket history, asset records, and approved supporting tools before forming an assessment
• Perform structured remote or physical inspection of affected endpoints and related equipment using approved checklists, access methods, and safety precautions
• Capture sufficient evidence to support escalation, investigation, remediation, audit, and possible root-cause review while protecting integrity and confidentiality
• Apply the approved severity matrix and elevate suspected malware, unauthorized access, data exposure, policy violations, repeated detections, or uncertain findings to the designated incident lead
• Carry out only approved containment actions and immediately report any business interruption, tool failure, unexpected behavior, or unsuccessful response action
• Confirm that scans, updates, quarantine actions, policy corrections, patches, credential actions, or other assigned remediation steps were completed and produced the expected result
• Identify inactive agents, outdated components, missed check-ins, policy mismatches, logging gaps, duplicate assets, and other conditions that weaken security visibility or protection
• Maintain accurate, factual, and timely incident records; avoid speculation and clearly distinguish confirmed facts, working assessments, pending validation, and required decisions
• Use assigned privileges only for authorized work, follow least-privilege principles, protect credentials and confidential information, and comply with evidence-retention and acceptable-use requirements
• Identify repeat alerts, confusing runbook steps, missing data, common false positives, and training needs, then submit improvement recommendations to the security team

Skills

Attention to Detail

Analytical Thinking

Procedure Discipline

Escalation Judgment

Communication

Learning Agility

Integrity and Teamwork

Education

Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or related discipline

Tools

Wazuh

Bitdefender GravityZone

PowerShell

Windows Command-Line Tools

Linux Commands

Job description

CallTek is seeking an Entry-Level IT Security Analyst to provide first-line review and analysis of alerts from Wazuh, Bitdefender, and approved tools. You will validate context, review logs, inspect devices, gather evidence, and follow defined incident-management procedures.

The role works under the IT Security Manager, handling containment, escalation, and remediation steps while protecting sensitive information and adhering to procedures.