Lead Analyst Cybersecurity

ERNI Philippines; Mandaluyong; Hybrid; PHP 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Training & Certifications

Hybrid work setup

Snacks and beverages

Job summary

ERNI Philippines is seeking an accomplished Senior Cyber Security professional to join our world-class IT security team. You will lead vulnerability management, risk analysis, firewall hardening, and security automation across on-prem and cloud environments.

The role requires extensive experience (10+ years) in cyber security, ITIL, and cloud security certifications. This position offers a hybrid work arrangement, professional growth opportunities, and exposure to MedTech, Finance, and Industry

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related field.
• Minimum of ten (10) years of cyber security, IT security compliance, or related experience.
• Must possess relevant certifications in ITIL (v4 or above), Cyber (Security+, CEH), and cloud (AZ-500, or AZ-900)

Responsibilities

• Administer various vulnerability assessment and baseline tools such as Tenable One, Hadrian and Wiz, including creation of vulnerability assessment, discovery, and baseline scans for networks.
• Perform analysis, risk assessment, and prioritization of vulnerability findings across on-premises, cloud environments.
• Review perimeter and host-based firewall rules, identify security gaps, and recommend rule optimization and hardening measures.
• Develop and maintain security automation workflows through APIs, scripting, and platform integrations to improve operational efficiency.
• Assist in software installation review processes for end-users.
• Coordinate with system administrators and application owners to validate, remediate, and verify security vulnerabilities and control deficiencies.
• Track, manage, and report security remediation activities; escalade overdue findings and ensure timely closure of identified risks.
• Assist in the development, update, or review of information security regulations and processes.
• Assist in writing business cases, proof-of-concept (PoC) criteria and testing documentation, and other related documents in support of IT security projects.
• Create, assign tickets, and follow up resolutions with appropriate system administrators.

Skills

Problem solving

Analytical thinking

Communication

Teamwork

Independent work

Education

Bachelor’s degree in Computer Science/Information Technology

Tools

Tenable One

Wiz

Tufin

ServiceNow

Github Copilot

Hadrian

Snyk

Ubuntu

MacOS

Win11

Job description

ERNIis a fast-growing Software Development company headquartered and founded in Switzerland in 1994, with more than 800 employees. We are highly specialized in IT & software engineering to enable and deliver innovation in process and technology. Our first service center in Asia Pacific is in Metro Manila (Mandaluyong) from where we provide our service to Europe, APAC incl. our local market Philippines, and USA regions. We are now geared towards expansion and are looking for highly motivated joiners.

WHY ERNI is the best place to call HOME?

• At ERNI, this is how we can support you;ALLcompanyPERKS AND BENEFITStake effectUPON HIRING!

• Contract: there is always a project and opportunity for you.

• Personal Development and Travel Opportunities outside the Philippines.

• Baby Basket– to welcome your newborn to the ERNI family.

• Fruit Basket– boost of vitamins during hospitalization.

• Free snacks and coffee in the office

UNLOCKING NEW DOORS OF GROWTH & OPPORTUNITIES

• Free Training with Certifications: Grow with us through technical and non-technical training.

• Challenging Projects: ERNI is dedicated to developing high-quality software in complex technical environments such as MedTech, Industry, Finance, and Transportation. Have the chance to participate in various technically challenging projects amongst passionate and skilled colleagues.

• Employee Welfare: You will be guided by a group of people who will guide and support you to have the right tools and mindset.

• Promotions & Recognition: From the very first day, we offer you a way to learn and develop yourself in our company. Your colleagues and superiors consistently recognize and appreciate all efforts, making you feel satisfied with your achievements.

• Communication: You will find transparency, honesty, and open communication in our working culture. we value suggestions, opinions, and feedback from all employees.

FLEXIBILITY

• Hybrid Set-Up: We are combining both remote work and in-person work. The hybrid setup will allow you to reduce commuting time and have a more flexible work schedule. This will help you to manage better your work-life balance.

EVENTS:

• We provide many opportunities to connect and build relationships. We are learning, growing, and celebrating achievements together. You will experience a wide range of different exciting activities. What to expect? Leisure Events, Summer Events, Family Events, Social Events, and Year-End Events.

What are our wishes?

• Bachelor’s degree in Computer Science, Information Technology, or related field.

• Minimum of ten (10) years of cyber security, IT security compliance, or related experience.

Technical Knowledge

• Good working knowledge of computer networks, databases, Windows and Linux operating system security, and web applications.

Soft Skills

• Strong problem-solving and analytical skills.

• Excellent communication and interpersonal skills.

• Ability to work independently and as part of a team.

Tools/Software

• Tenable One, Wiz, Tufin, ServiceNow, Github Copilot, Hadrian, Snyk, Ubuntu, MacOS, Win11

Certification

• Must possess relevant certifications in ITIL (v4 or above), Cyber (ie Security+, CEH), and cloud (ie AZ-500, or AZ-900)

How can you contribute to the team?

System Management:

• Administer various vulnerability assessment and baseline tools such as Tenable One, Hadrian and Wiz, including creation of vulnerability assessment, discovery, and baseline scans for networks.

Security Management:

• Perform analysis, risk assessment, and prioritization of vulnerability findings across on-premises, cloud environments.

• Review perimeter and host-based firewall rules, identify security gaps, and recommend rule optimization and hardening measures.

• Develop and maintain security automation workflows through APIs, scripting, and platform integrations to improve operational efficiency.

• Assist in software installation review processes for end-users.

• Coordinate with system administrators and application owners to validate, remediate, and verify security vulnerabilities and control deficiencies.

• Track, manage, and report security remediation activities; escalade overdue findings and ensure timely closure of identified risks.

Documentation and Reporting:

• Assist in the development, update, or review of information security regulations and processes.

• Assist in writing business cases, proof-of-concept (PoC) criteria and testing documentation, and other related documents in support of IT security projects.

• Create, assign tickets, and follow up resolutions with appropriate system administrators.