Security Analyst

Risewave Consulting, Inc.; Quezon City; On-site; PHP 600,000 - 1,000,000; Full time

Job summary

Risewave Consulting, Inc. is seeking a Security Analyst to join our Global Cybersecurity Team. You will monitor security tools, identify vulnerabilities, and coordinate remediation with IT and development teams to strengthen our security posture.

You will contribute to vulnerability management processes, create detailed reports, and help ensure our IT systems remain secure across on-prem and cloud environments. Strong communication and continuous learning mindset are essential.

Qualifications

• Requires 4+ years in vulnerability assessment, pen testing, or cybersecurity.
• Hands-on with vulnerability scanning tools and remediation processes.
• Familiarity with cloud platforms (Azure & AWS).

Responsibilities

• Monitor security tools and dashboards to identify vulnerabilities and propose compensating controls.
• Assess risks across IT infrastructure and cloud platforms.
• Communicate findings to teams and track vulnerabilities through resolution.

Skills

Vulnerability assessment

Penetration testing

Cloud platforms knowledge

Networking knowledge

Operating systems knowledge

Programming or scripting

DevSecOps practices

Communication skills

Organizational skills

Certifications (GIAC/Network+/AZ-500)

Tools

Azure

AWS

Vulnerability scanning tools

Job description

As a Security Analyst, you will be a key member of our Global Cybersecurity Team, helping to strengthen cybersecurity posture. This role involves monitoring tools and dashboards, identifying and mitigating security vulnerabilities, and collaborating with teams to address risks effectively. You will also contribute to continuously improving our vulnerability management processes and play an active role in ensuring our IT systems remain secure.

Key Responsibilities:

• Monitor security tools and dashboards to identify vulnerabilities, assess risks, and propose compensating controls to reduce risk.
• Assess risks across IT infrastructure and cloud platforms.
• Communicate findings to appropriate teams and track vulnerabilities through resolution.
• Create detailed vulnerability reports for technical teams and summary reports for management.
• Collaborate with IT and development teams to prioritize and remediate vulnerabilities.
• Contribute to the development and improvement of vulnerability management processes and tools.

Qualifications

• At least 4 years of experience in vulnerability assessment, penetration testing, or cybersecurity.
• Hands-on experience with vulnerability scanning tools and remediation processes.
• Hands-on experience with cloud platforms (preferably Azure & AWS)
• Knowledge of networking, operating systems (Windows, Linux), and application security.
• Experience with vulnerability frameworks (NIST, CVSS, etc.)
• Some experience with programming or scripting and familiarity with DevSecOps practices.
• Strong communication skills, with the ability to deliver clear oral, written, and visual presentations.
• Strong organizational skills, with the ability to plan, prioritize, and align tasks effectively.
• Customer-focused mindset with a strong eagerness to learn and grow.
• SANS GIAC, Network+, Security+, AZ-500 or other industry certifications preferred.