Lead Analyst Cybersecurity

ERNI; Mandaluyong; Hybrid; PHP 1,800,000 - 2,800,000; Full time

Benefits offered by this job

Baby Basket

Fruit Basket

Free snacks and coffee in the office

Free training with certifications

Promotions & Recognition

Hybrid Set-Up

Events and social activities

Job summary

ERNI is seeking a senior IT security professional to lead system and security management. You will administer vulnerability assessments across on-prem and cloud environments while prioritizing risks and coordinating remediation with cross-functional teams.

The role requires a Bachelor’s in CS/IT or related field and at least 10 years in cyber security, IT compliance, and cloud security. A hybrid work setup with opportunities for training and certification is offered.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related field.
• Minimum of ten (10) years of cyber security, IT security compliance, or related experience.
• Must possess relevant certifications in ITIL (v4 or above), Cyber (Security+, CEH), and cloud (AZ-500, or AZ-900)

Responsibilities

• Administer vulnerability assessment and baseline tools such as Tenable One, Hadrian and Wiz.
• Analyze risk and prioritize findings across on-prem and cloud environments.
• Review firewall rules; identify gaps and harden controls.
• Develop security automation workflows via APIs and scripting.
• Assist in software installation review processes for end-users.
• Coordinate with system admins to remediate vulnerabilities and close findings.
• Track and report remediation activities to ensure timely closure.
• Assist in creating security documentation and processes.

Skills

Cyber security

IT security compliance

Vulnerability assessment

Firewall rules

Security automation

Documentation

Education

Bachelor's degree in Computer Science, Information Technology, or related field

Tools

Tenable One

Wiz

Tufin

ServiceNow

Github Copilot

Hadrian

Snyk

Ubuntu

MacOS

Win11

Job description

Job Description:

ERNIis a fast-growing Software Development company headquartered and founded in Switzerland in 1994, with more than 800 employees. We are highly specialized in IT & software engineering to enable and deliver innovation in process and technology. Our first service center in Asia Pacific is in Metro Manila (Mandaluyong) from where we provide our service to Europe, APAC incl. our local market Philippines, and USA regions. We are now geared towards expansion and are looking for highly motivated joiners.

WHY ERNI is the best place to call HOME?

• At ERNI,this is how we can support you;ALLcompanyPERKS AND BENEFITStake effectUPON HIRING!

• Contract: there is always a project and opportunity for you.

• Personal Development and Travel Opportunities outside the Philippines.

• Baby Basket– to welcome your newborn to the ERNI family.

• Fruit Basket– boost of vitamins during hospitalization.

• Free snacks and coffee in the office

UNLOCKING NEW DOORS OF GROWTH & OPPORTUNITIES

• Free Training with Certifications: Grow with us through technical and non-technical training.

• Challenging Projects:ERNI is dedicated to developing high-quality software in complex technical environments such as MedTech, Industry, Finance, and Transportation. Have the chance to participate in various technically challenging projects amongst passionate and skilled colleagues.

• Employee Welfare:You will be guided by a group of people who will guide and support you to have the right tools and mindset.

• Promotions & Recognition:From the very first day, we offer you a way to learn and develop yourself in our company. Your colleagues and superiors consistently recognize and appreciate all efforts, making you feel satisfied with your achievements.

• Communication:You will find transparency, honesty, and open communication in our working culture. we value suggestions, opinions, and feedback from all employees.

FLEXIBILITY

• Hybrid Set-Up:We are combining both remote work and in-person work. The hybrid setup will allow you to reduce commuting time and have a more flexible work schedule. This will help you to manage better your work-life balance.

EVENTS:

• We provide many opportunities to connect and build relationships. We are learning, growing, and celebrating achievements together. You will experience a wide range of different exciting activities. What to expect? Leisure Events, Summer Events, Family Events, Social Events, and Year-End Events.

What are our wishes?

• Bachelor’s degree in Computer Science, Information Technology, or related field.

• Minimum of ten (10) years of cyber security, IT security compliance, or related experience.

Technical Knowledge

• Good working knowledge of computer networks, databases, Windows and Linux operating system security, and web applications.

Soft Skills

• Strong problem-solving and analytical skills.

• Excellent communication and interpersonal skills.

• Ability to work independently and as part of a team.

Tools/Software

• Tenable One, Wiz, Tufin, ServiceNow, Github Copilot, Hadrian, Snyk, Ubuntu, MacOS, Win11

Certification

• Must possess relevant certifications in ITIL (v4 or above), Cyber (ie Security+, CEH), and cloud (ie AZ-500, or AZ-900)

How can you contribute to the team?

System Management:

• Administer various vulnerability assessment and baseline tools such as Tenable One, Hadrian and Wiz, including creation of vulnerability assessment, discovery, and baseline scans for networks.

Security Management:

• Perform analysis, risk assessment, and prioritization of vulnerability findings across on-premises, cloud environments.

• Review perimeter and host-based firewall rules, identify security gaps, and recommend rule optimization and hardening measures.

• Develop and maintain security automation workflows through APIs, scripting, and platform integrations to improve operational efficiency.

• Assist in software installation review processes for end-users.

• Coordinate with system administrators and application owners to validate, remediate, and verify security vulnerabilities and control deficiencies.

• Track, manage, and report security remediation activities; escape overdue findings and ensure timely closure of identified risks.

Documentation and Reporting:

• Assist in the development, update, or review of information security regulations and processes.

• Assist in writing business cases, proof-of-concept (PoC) criteria and testing documentation, and other related documents in support of IT security projects.

• Create, assign tickets, and follow up resolutions with appropriate system administrators.