Night Shift IT Security Analyst — Defender & Cloud SecOps

Bravissimo Resourcing Inc.; Pasig; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

Bravissimo Resourcing Inc. is seeking a cybersecurity professional to monitor and respond to security alerts, manage Defender-based security operations, and coordinate across endpoints, identities, and cloud environments.

You will support vulnerability management, threat detection, and incident response while aligning with established standards and regulatory requirements. The role emphasizes collaboration across technical and non-technical teams, with focus on continuous improvement,

Qualifications

• Practical knowledge of TCP/IP, firewalls, VPNs, DNS, DHCP, certificates and SSL/TLS.
• Hands-on experience with Microsoft Defender capabilities across endpoint, identity, email and cloud workloads, together with security monitoring, threat detection and incident response.
• Experience with vulnerability and exposure management using Qualys or Rapid7, including scanning, secure configuration assessment, prioritization and remediation tracking.
• An understanding of common attack techniques, supply chain threats and current and emerging cyber risks.
• Knowledge of the OWASP Top 10 and recognized cyber security principles.
• An understanding of the NIST Cybersecurity Framework and NIS Regulations.
• Experience working towards Cyber Essentials.
• The ability to maintain security policies, procedures, technical documentation and audit evidence.
• A methodical, risk-based approach to investigating issues, prioritizing actions and making proportionate decisions.
• The ability to analyze complex information and translate it into clear, business-relevant recommendations.
• Strong collaboration and influencing skills, with the ability to build trusted relationships across technical and non-technical teams.
• The ability to manage competing priorities, take ownership of security actions and support occasional out-of-hours requirements.

Responsibilities

• Monitor and investigate alerts across Microsoft Defender and the wider Microsoft security stack, using Red Canary where applicable to extend detection and response capability, and coordinate incident response through to resolution.
• Configure, maintain and support Microsoft security technologies across endpoint, identity, email, cloud and SaaS environments, with the Defender suite serving as the core operational security platform.
• Support firewalls, VPNs, endpoint protection, email security, identity and access controls, vulnerability management and security monitoring platforms.
• Assess current and emerging cyber threats, including supply chain and third-party risks, and help improve the organization’s ability to detect and respond to them.
• Coordinate vulnerability assessments using Qualys or Rapid7, correlate findings with Microsoft security data, and work with system owners to prioritize and track remediation through to completion or formal risk acceptance.
• Review systems, applications, Microsoft Azure resources, cloud services and supplier environments for secure configuration and alignment with approved standards, using Wiz and relevant Microsoft Defender capabilities to identify and manage cloud risk.
• Support penetration tests, audits, assurance reviews and accreditation activities.
• Provide technical evidence and documentation for security policies, risk assessments, operational risk decisions and compliance requirements.
• Provide practical security guidance to technical teams, project stakeholders and suppliers, constructively supporting and challenging decisions where needed.
• Contribute to security incidents and other high-priority scenarios, applying sound judgement and communicating clearly under pressure.
• Identify opportunities to improve security services through upgrades, automation, AI-enabled capabilities and better operational processes.
• Work in agile ways, collaborating across teams and contributing to continuous improvement.
• You will also help maintain alignment with the NIST Cybersecurity Framework, applicable Network and Information Systems (NIS) Regulations, Cyber Essentials and other relevant organizational or regulatory requirements.

Skills

Windows 10/11

Windows Server

Hyper-V

PowerShell

Azure

Entra ID

Microsoft Defender

Security operations

Tools

Intune

Windows Autopilot

SCCM/MECM

MDT

WDS

Jira Service Management

Confluence

Red Canary

Qualys

Rapid7

Wiz

Job description

Bravissimo Resourcing Inc. is seeking a cybersecurity professional to monitor and respond to security alerts, manage Defender-based security operations, and coordinate across endpoints, identities, and cloud environments.

You will support vulnerability management, threat detection, and incident response while aligning with established standards and regulatory requirements. The role emphasizes collaboration across technical and non-technical teams, with focus on continuous improvement,