Remote IT Security Analyst — Defender, AD & MDR

Twoconnect; Metro Manila; Remote; PHP 480,000 - 700,000; Full time

Benefits offered by this job

Work from home

Health benefits

Career development

Global exposure

Job summary

Twoconnect is seeking an IT Security Analyst to protect a Microsoft-based environment across global operations. You will monitor, respond to incidents, manage identities, and advance Essential Eight controls while coordinating with Arctic Wolf and internal teams.

Key duties include triage of Defender alerts, vulnerability prioritisation, patch compliance, and security baselines. Remote, with global collaboration and career development opportunities.

Qualifications

• Minimum 3 years in cyber security operations or related IT security role.
• Experience securing Microsoft enterprise environments and threat investigation.
• Knowledge of AD, Entra ID, MFA, CA and access reviews.
• Familiarity with SIEM and MDR providers; Arctic Wolf is valued.
• ITIL-aligned ITSM processes and Freshservice exposure desirable.

Responsibilities

• Triage and investigate Defender alerts and SOC escalations across global ops.
• Coordinate containment, eradication and recovery with teams and providers.
• Support MS Defender endpoint protection and MS 365 security posture.
• Prioritise vulnerabilities based on risk and track remediation.
• Review security baselines, patch compliance, and using management tools.
• Review AD/Entra ID security, MFA, CA, least-privilege, access reviews.
• Assist with privileged accounts, service accounts and application permissions.
• Improve Essential Eight controls and evidence remediation.
• Record incidents in Freshservice and support ITSM processes.
• Perform root-cause analysis and contribute to playbooks and knowledge articles.
• Report on incident metrics and cross-team collaboration for continuity.

Skills

Defender for Endpoint

Active Directory

MFA

Conditional Access

SIEM

Incident response

Threat analysis

Vulnerability management

PowerShell

Kusto (KQL)

Freshservice

Intune

Arctic Wolf

Microsoft 365 security

Education

Cyber security degree/certification

Microsoft security certifications

CompTIA Security+

ITIL Foundation

Tools

Microsoft Defender for Endpoint

Arctic Wolf

Microsoft Entra ID

NinjaOne

Freshservice

Defender for Office 365

Intune

Job description

Twoconnect is seeking an IT Security Analyst to protect a Microsoft-based environment across global operations. You will monitor, respond to incidents, manage identities, and advance Essential Eight controls while coordinating with Arctic Wolf and internal teams.

Key duties include triage of Defender alerts, vulnerability prioritisation, patch compliance, and security baselines. Remote, with global collaboration and career development opportunities.