Security Analyst

Booth & Partners; Philippines; On-site; PHP 500,000 - 640,000; Full time

Job summary

Booth & Partners is seeking a Security Analyst to administer cloud security policies, perform risk assessments across customer environments, and support managed services clients to minimize threats. The role is Hybrid (Onsite & Remote) with travel flexibility, based in the Manila area.

Responsibilities include vulnerability management, incident response, client audits, governance guidance, and security reporting to senior management.

Qualifications

• 1–3+ years in an IT security role within an enterprise or MSP.
• Hands-on with Windows and Linux/UNIX, secure network architectures, IAM, and firewall/IDS/IPS basics.
• Strong written and verbal communication and technical documentation skills.
• Self-starter with proactive advisory mindset and calm under pressure.

Responsibilities

• Risk & Vulnerability Management: conduct risk, gap, and vulnerability assessments across customer environments and cloud platforms.
• Security Operations & Incident Response: respond to security incidents and execute change management for improvements.
• Client Advisory & Auditing: perform security audits and deliver clear risk reports with remediations.
• Governance & Project Guidance: advise on controls, security guidelines, and compliance standards.
• Reporting & Continuous Improvement: generate security metrics and refine practices across offerings.

Skills

Windows OS

Linux/UNIX

IAM

Network security

Firewall/IDS/IPS

Education

Information Systems or Computer Science degree

CISSP

CISA

CISM

OSCP

CEH

GIAC

Tools

Security Tools

Job description

• State/Province National Capital Region (Manila)
• Country AU

Job Description

Job Title: Security Analyst

Line of Business: Services

Work Arrangement: Hybrid (Onsite & Remote) | Requires travel flexibility

Role Purpose

The Security Analyst administers cloud security policies, enforces preventive and recovery strategies, and conducts vulnerability and risk assessments for Managed Services customers to minimize internal and external security threats.

Key Responsibilities

• Risk & Vulnerability Management: Conduct risk, gap, and vulnerability assessments across customer environments, cloud platforms, and IT infrastructure using standard security tools and frameworks.
• Security Operations & Incident Response: Respond to security incidents across all project lifecycles, participate in incident response workflows, and implement authorized security enhancements through a strict change management process.
• Client Advisory & Auditing: Perform security audits of customer systems, deliver clear reports detailing identified risks and recommended remediations, and lead client discussions regarding findings.
• Governance & Project Guidance: Proactively advise internal project teams and client stakeholders on physical/technical controls, security guidelines, and compliance standards.
• Reporting & Continuous Improvement: Generate operational security metrics for management and continuously refine information security practices across As-A-Service offerings.

Requirements & Experience

• Experience: 1–3+ years of dedicated experience in an IT security role within a enterprise or Managed Services (MSP) environment.
• Technical Knowledge: Hands-on understanding of Windows and Linux/UNIX operating systems, secure network architectures, identity and access management (IAM), and firewall/IDS/IPS protocols.
• Education: Tertiary qualifications in Information Systems, Computer Science, or equivalent practical IT experience.
• Core Competencies: Exceptional written and verbal communication, strong technical documentation skills, proven negotiation abilities, and the capacity to remain calm under high-pressure security incidents.
• Operational Style: Self-starter capable of operating with minimal supervision while maintaining a proactive advisory mindset.

Preferred Certifications & Frameworks

• Industry Certifications: CISSP, CISA, CISM, OSCP, CEH, or GIAC.
• Framework Familiarity: ISO 27001/2, ISO 31000, NIST, COBIT, or ITIL v3.