Security Analyst

Booth; Philippines; Hybrid; PHP 500,000 - 900,000; Full time

Job summary

Booth in the Philippines seeks a Security Analyst to administer cloud security policies and enforce preventive and recovery strategies for Managed Services projects in a hybrid setup. You will drive risk assessments and security improvements across client environments.

The role requires 1–3+ years in IT security, knowledge of Windows/Linux, IAM, and firewall/IDS/IPS, with strong communication and documentation skills. Travel flexibility is required.

Qualifications

• 1–3+ years in an IT security role within an enterprise or MSP environment.
• Hands-on understanding of Windows and Linux/UNIX, IAM, and secure networks.
• Strong written and verbal communication and documentation skills.

Responsibilities

• Conduct risk, gap and vulnerability assessments across customer environments.
• Respond to security incidents and follow change-management processes.
• Perform security audits and present clear remediation recommendations.
• Advise project teams on security controls, guidelines and compliance.
• Generate security metrics and drive continuous improvement.

Skills

IT security

Risk assessment

Incident response

Education

Bachelor's degree in Information Systems or Computer Science

Tools

Windows

Linux

Firewall/IDS/IPS

Job description

Job Title: Security Analyst

Line of Business: Services

Work Arrangement: Hybrid (Onsite & Remote) | Requires travel flexibility

Role Purpose

The Security Analyst administers cloud security policies, enforces preventive and recovery strategies, and conducts vulnerability and risk assessments for Managed Services customers to minimize internal and external security threats.

Key Responsibilities

• Risk & Vulnerability Management: Conduct risk, gap, and vulnerability assessments across customer environments, cloud platforms, and IT infrastructure using standard security tools and frameworks.
• Security Operations & Incident Response: Respond to security incidents across all project lifecycles, participate in incident response workflows, and implement authorized security enhancements through a strict change management process.
• Client Advisory & Auditing: Perform security audits of customer systems, deliver clear reports detailing identified risks and recommended remediations, and lead client discussions regarding findings.
• Governance & Project Guidance: Proactively advise internal project teams and client stakeholders on physical/technical controls, security guidelines, and compliance standards.
• Reporting & Continuous Improvement: Generate operational security metrics for management and continuously refine information security practices across As-A-Service offerings.

Requirements & Experience

• Experience: 1-3+ years of dedicated experience in an IT security role within a enterprise or Managed Services (MSP) environment.
• Technical Knowledge: Hands-on understanding of Windows and Linux/UNIX operating systems, secure network architectures, identity and access management (IAM), and firewall/IDS/IPS protocols.
• Education: Tertiary qualifications in Information Systems, Computer Science, or equivalent practical IT experience.
• Core Competencies: Exceptional written and verbal communication, strong technical documentation skills, proven negotiation abilities, and the capacity to remain calm under high-pressure security incidents.
• Operational Style: Self-starter capable of operating with minimal supervision while maintaining a proactive advisory mindset.

Preferred Certifications & Frameworks

• Industry Certifications: CISSP, CISA, CISM, OSCP, CEH, or GIAC.
• Vendor Certifications: Fortinet NSE 4+, Palo Alto PCNSA/PCNSE, Check Point CCSA, or Cisco CCNA/CCNP Security.
• Framework Familiarity: ISO 27001/2, ISO 31000, NIST, COBIT, or ITIL v3.