Security Analyst

OwnBank; Taguig; Hybrid; PHP 480,000 - 720,000; Full time

Job summary

OwnBank is seeking a Security Analyst to protect information assets through continuous monitoring, incident response, threat detection, and control validation. The role translates security policies into operational controls, manages vulnerabilities, conducts threat hunting, and supports compliance with regulatory requirements.

Key duties include monitoring dashboards for asset inventory and user behavior, triaging SIEM alerts, reviewing policies, supervising firewall changes, gathering logs from

Qualifications

• Experience in security incident response and investigations.
• Ability to triage alerts from SIEM and follow playbooks.
• Familiarity with vulnerability management processes.
• Understanding of AppSec/KYC basics.

Responsibilities

• Monitor dashboards for asset inventory, user behavior, and unauthorized changes.
• Triage SIEM alerts and follow playbooks for escalation.
• Assist in version control and review of infosec policies, procedures, and awareness materials.
• Maintain tracking for policy updates and training compliance.
• Maintain onboarding checklist for outsourced providers using BSP outsourcing criteria.
• Track and verify firewall rule changes and coordinate reviews with infrastructure teams.
• Gather logs from APIs, cloud IAM systems, and backend services to support security investigations.
• Monitor cloud activity for signs of abnormal access or misconfiguration.
• Perform baseline scans for lower-risk apps and assist in fixing findings with developers.
• Monitor onboarding and KYC behavior for fraud or identity anomalies.
• Coordinate interviews during incident investigations, gather audit evidence, and maintain compliance reports.
• Track patch statuses, configuration changes, and alert resolutions across teams.
• Other tasks as assigned by the immediate superior.

Skills

Incident response

Threat detection

Vulnerability mgmt

Policy awareness

Education

Bachelor's in CS/IT

Tools

SIEM

Firewall

Cloud IAM

Logging tools

Job description

The Security Analyst function protects the bank's information assets through continuous monitoring, incident response, threat detection, and control validation. It translates security policies into operational controls, manages vulnerabilities, performs threat hunting, and oversees attack surface management. The function also supports threat intelligence sharing and ensures alignment with regulatory requirements.

Duties and Responsibilities:

Monitoring & Detection

• Monitor dashboards for asset inventory, user behavior, and unauthorized changes.

• Triage SIEM alerts and follow established playbooks for escalation.

Policy & Documentation Support

• Assist in version control and review of infosec policies, procedures, and awareness materials.

• Maintain tracking for policy updates and training compliance.

Third-Party & Firewall Review

• Maintain onboarding checklist for outsourced providers using BSP outsourcing criteria.

• Track and verify firewall rule changes and coordinate reviews with infrastructure teams.

API, Cloud & System Logging

• Gather logs from APIs, cloud IAM systems, and backend services to support security investigations.

• Monitor cloud activity for signs of abnormal access or misconfiguration.

AppSec & KYC Support

• Perform baseline scans for lower-risk apps and assist in fixing findings with developers.

• Monitor onboarding and KYC behavior for fraud or identity anomalies.

Coordination & Reporting

• Coordinate interviews during incident investigations, gather audit evidence, and maintain compliance

reports.

• Track patch statuses, configuration changes, and alert resolutions across teams.

• Other tasks as assigned by the immediate superior.