Remote IT Security Analyst — Defender & Identity

Twoconnect Philippines, Inc.; Metro Manila; Remote; PHP 600,000 - 1,100,000; Full time

Benefits offered by this job

Work from home

HMO with dependents

Government-mandated benefits

Global collaboration opportunities

Career development programs

Job summary

Twoconnect Philippines, Inc. is seeking an IT Security Analyst to monitor and improve security across global operations.

You will handle Defender alerts, incident response, identity management, vulnerability remediation and ITSM processes, coordinating with internal teams and an external MDR provider. Ideal candidates have 3+ years in cyber security, strong MS security knowledge, AD/Entra ID experience and familiarity with SIEMs.

Qualifications

• At least 3 years of experience in cyber security operations, incident response or IT with security responsibilities.
• Experience securing Microsoft enterprise environments and investigating threats with Defender for Endpoint or equivalent.
• Hands-on experience with Active Directory, Entra ID, MFA, Conditional Access and access reviews.
• Experience working with a SIEM and managed SOC/MDR provider; Arctic Wolf is highly regarded.
• Familiarity with Essential Eight and ITIL-aligned IT service management; Freshservice experience desirable.
• Strong knowledge of Microsoft 365 and Windows security (Exchange Online, endpoints, server).
• Experience with log analysis and threat investigation including phishing and ransomware.
• Understanding of networking fundamentals (TCP/IP, DNS, firewalls, VPNs).
• PowerShell or KQL experience for investigation/automation desirable.
• Exposure to Intune, Defender for Office 365 and Defender for Identity desirable.
• Global or multi-site operations experience desirable.
• Relevant certifications in cyber security or IT disciplines are desirable.

Responsibilities

• Triage and investigate Defender alerts and SOC escalations.
• Coordinate containment, eradication and recovery with security teams.
• Support endpoint protection, security posture, and OS hardening.
• Prioritise vulnerabilities and track remediation.
• Review security baselines and patch compliance.
• Strengthen AD and Entra ID security incl. MFA and CA.
• Review privileged accounts and access reviews.
• Support Essential Eight controls and evidence maintenance.
• Assist risk assessments, policy reviews and audit actions.
• Record incidents and changes in ITSM system (Freshservice).
• Perform root cause analysis and update playbooks.
• Report on incident response and security coverage.
• Collaborate with IT and business teams to resolve security issues.
• Provide security guidance and phishing awareness training.
• Handle after-hours incident response when required.
• Other duties as needed.

Skills

Cybersecurity operations

Incident response

Threat investigation

Identity and access management

PowerShell

Kusto Query Language (KQL)

Log analysis

Microsoft 365 security

EDR tooling

Security best practices

Education

Cyber security or IT related degree

Tools

Microsoft Defender for Endpoint

Arctic Wolf

NinjaOne

Freshservice

SIEM

Job description

Twoconnect Philippines, Inc. is seeking an IT Security Analyst to monitor and improve security across global operations.

You will handle Defender alerts, incident response, identity management, vulnerability remediation and ITSM processes, coordinating with internal teams and an external MDR provider. Ideal candidates have 3+ years in cyber security, strong MS security knowledge, AD/Entra ID experience and familiarity with SIEMs.