Security Analyst

Hack in Hire; Philippines; Remote; PHP 700,000 - 1,000,000; Full time

Benefits offered by this job

Remote collaboration with LATAM teams

Continuous internal/external training

Career development plan

Job summary

Hack in Hire is seeking a Security Analyst to join our MDR/MTI operations. You’ll focus on threat detection, analysis, and mitigation, supporting clients across global environments.

Join a dynamic, international team with opportunities for hands-on security tooling, scripting, and continuous training. Remote coordination with teams across regions is a key aspect of the role.

Qualifications

• Degree in Engineering or related Cybersecurity field
• Minimum 1 year experience in security alert analysis on SIEM/EDR platforms
• Knowledge of Windows and UNIX/Linux systems
• Networking protocols knowledge (TCP/IP, DHCP, DNS)
• Scripting skills (Bash, Python, PowerShell)
• Analytical and proactive mindset
• Teamwork and communication in English

Responsibilities

• Monitor and analyze security alerts across EDR/SIEM platforms
• Analyze threat intelligence to anticipate attacks
• Respond to detected threats and mitigate impacts
• Generate reports and provide client recommendations
• Collaborate to improve detection rules and reduce false positives
• Automate tasks using scripting
• Participate in client meetings and deployment kickoff

Job description

Location:

APAC - Remote (has to be able to coordinate himself with Spanish team)

Salary:

depending on experience and skills

We are looking for a Security Analyst for a cybersecurity consulting and services company (Barcelona-based, international scope) that has been protecting organizations for years across incident response, digital forensics, managed services, threat intelligence, and Red & Purple Team engagements. You will join a growing cybersecurity team focused on building and improving advanced detection capabilities for clients across complex environments.

About the role

As a Security Analyst, you will be part of the DRTI team for MDR (Managed Detection and Response) and MTI (Managed Threat Intelligence) services, playing a key role in threat detection, analysis, and mitigation.

What you’ll do

Your responsibilities will include:

• Monitor and analyze security alerts across EDR/SIEM platforms, identifying suspicious activity and performing initial diagnostics on the origin and scope of threats.
• Analyze threat intelligence, anticipating potential attacks against our clients.
• Respond to detected threats, containing and applying mitigation measures to minimize impact.
• Generate reports and draft notifications, communicating analysis findings and providing recommendations for the client to follow.
• Collaborate on improving detection rules, optimizing detection capabilities and reducing false positives.
• Contribute to the evolution of procedures and playbooks.
• Automate tasks and processes using PowerShell, Python, or Bash scripting.
• Participate in client meetings, including follow-ups to provide insights on analyzed alerts and kickoff sessions to support initial deployment and configuration.

What we’re looking for

• Degree in Engineering or a related field in Cybersecurity, or equivalent demonstrable training/professional experience.
• Minimum of 1 year of experience in security alert analysis on SIEM and/or EDR platforms such as CrowdStrike, Microsoft Sentinel, Cortex, Splunk, Elastic ELK, LogRhythm, QRadar, Chronicle, or Wazuh, among others.
• Knowledge of Windows and UNIX/Linux systems administration.
• Solid understanding of networking and communication protocols, including TCP/IP, DHCP, DNS, and other fundamental protocols.
• Scripting skills (Bash, Python, PowerShell) for task automation and tool development.
• Analytical capacity and logical thinking, with the ability to correlate events, detect attack patterns, and solve complex problems efficiently.
• Attention to detail and a proactive mindset, with the ability to identify anomalies and critically analyze security alerts.
• Organizational and teamwork skills.
• Proficiency in English, with the ability to communicate clearly and effectively in technical environments and with international teams.
• Availability to join the 24/7 on-call rotation, ensuring a fast and efficient response to critical alerts.
• Specialized training, such as certifications or Master’s degrees in Cybersecurity, will be highly valued.

What’s offered

• Join an international, young, and dynamic team with an excellent working environment.
• Remote participation from LATAM under a follow-the-sun modality.
• Close collaboration with Red and Blue Teams to stay up-to-date on real-world attacks and the latest adversarial techniques.
• Access to various detection technologies including EDR, SIEMs, Cyber Intelligence, and other security tools.
• Continuous internal and external training to keep your skills sharp (including certifications and attendance at annual conferences).
• Personalized professional career plan, designed according to your interests and evolution, ensuring your growth within the company.