Senior Analyst, Cybersecurity End Point Security

Tenet Healthcare Corporation; Philippines; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

Tenet Healthcare Corporation is seeking an IS Security Analyst to join the Threat Management team in the Philippines. The role focuses on vulnerability management and endpoint security support across the organization.

You will evaluate security exceptions, review alerts and threat reports, and collaborate with IT to ensure policies, patching, and configurations meet security best practices. Strong English communication is required.

Qualifications

• IS security professional with knowledge in vulnerability and endpoint security systems/processes.
• Understanding of malware families, threats, and OS exploits.
• Strong background in endpoint security tools and network security best practices.

Responsibilities

• Provide operational support for endpoint security solutions.
• Evaluate security policy exceptions for legitimacy and completeness.
• Review endpoint security alerts for true/false positives.
• Review Threat Reports and recommend resolutions.
• Ensure endpoint security standards and configurations across OS and devices.
• Support audit and compliance with endpoint security controls.

Skills

Vulnerability management

Endpoint security

Network security

Vulnerability assessment

OS security

Cloud security

Encryption

Security controls

Endpoint security solutions

Network traffic basics

Cross-functional collaboration

English proficiency

Education

BSc in Computer Science

3+ years of experience

Certifications (CISSP, CompTIA Security+)

Job description

OVERVIEW AND REPORTING RELATIONSHIP

This analyst will be a member of the IS Threat Management team, reporting to the Cybersecurity Manager. This position will be responsible for various technical cybersecurity analyst functions, including vulnerability management, as well as providing network and endpoint security support.

RESPONSIBILITIES

Endpoint Security Administration

• Provide operational support for endpoint security solutions.
• Support change management tasking relative to the security policies associated with endpoint security solutions.
• Evaluate security exception requests to determine legitimacy and completeness of requests prior to escalation to management.
• Review endpoint security alerts to determine true or false positives based on industry standards.
• Review Threat Reports generated from Endpoint security tools and provide recommendations and plans for appropriate resolutions.
• Continually assess, report on, and make recommendations regarding proposed architectures, strategies, and systems in the endpoint security space.
• Ensure endpoint security platforms, policies, and emerging technologies meet organizational standards and security best practices.
• Support audit and compliance activities by providing acceptable evidence of endpoint security controls and supporting information.
• Troubleshoot and resolve issues related to endpoint security technologies in collaboration with colleagues from IT departments and functional stakeholders.
• Serve as an escalation point for endpoint security technologies.
• Ensure OS level configuration and patch management standards are deployed and adhered to.
• Configuration and support of endpoint technology policies for all applicable endpoint security technologies, including, but not limited to, Anti-malware, DLP, EDR, and endpoint encryption.
• Support of complex technical projects, meeting target timelines, providing technical support to project meetings, authoring project documentation when required, and help to resolve issues.
• Tune and maintain security policies and enhancements to protect company sensitive and confidential information to mitigate security threats to endpoints, assets, data, and users.
• Review technical security exception requests submitted by various personnel across the organization. Conduct technical risk assessment of each request to make recommendations and improve security risk across the enterprise.

QUALIFICATIONS

• Information Systems (IS) security professional with a broad range of knowledge in vulnerability and endpoint security systems/processes.
• Intermediate or advanced understanding of malware families, their types, and threats they pose.
• Strong technical background of endpoint security tools, as well as network security best practices.
• Demonstrated ability in identification of vulnerabilities/threats to data, systems and networks.
• In-depth understanding of operating systems internal, the mechanics of OS exploits, methods of preventing and/or detecting OS exploits and endpoint hardening.
• Comprehensive knowledge of cloud infrastructure, virtual platforms, encryption technologies, endpoint protection, network and cybersecurity tools.
• Demonstrated knowledge of security controls for network, applications, and operating systems.
• Knowledge of existing endpoint security technologies and capabilities to partner with internal IT teams to build and operationalize endpoint security solutions.
• Fundamental understanding of bi-directional traffic flow sources from the endpoints.
• Ability to navigate and work effectively across a complex, geographically dispersed organization.
• Fluency in speaking and communicating in English.

EDUCATION AND WORK EXPERIENCE

• Minimum three of experience
• BS in Computer Science or equivalent field.
• Preferred education and/or experience: Relevant industry recognized certifications (CISSP, CompTIA Security+,
• CEH, GIAC, Security+, etc.)

SPECIALIZED KNOWLEDGE, SKILLS & ABILITIES:

• Effectively communicate security goals effectively with other departments.
• Ability to work within an environment of frequently changing priorities.
• Knowledge of industry trending th reats ...
• Proven ability in the performance of information security risk assessments.
• Experience in performing risk and compliance assessments of new and existing solutions.
• Ability to provide guidance and recommended remediation or alternative solutions for both internal and external supported environments.
• Ability to provide guidance in the identification, documentation and rating of threats/vulnerabilities, and remediation steps recommended to reduce risks to data, systems and networks.