Senior Analyst, Cybersecurity – End Point Security

Tenet Healthcare; Taguig; On-site; PHP 600,000 - 900,000; Full time

Job summary

Tenet Healthcare in Taguig, Philippines, is seeking an IS Threat Management analyst to join the cybersecurity team. You will handle vulnerability management, endpoint security administration, and provide network and endpoint security support across the organization.

The role requires experience in endpoint security tools, OS hardening, and risk assessments, with strong English communication skills and the ability to work in a geographically dispersed team.

Qualifications

• Broad knowledge of vulnerability and endpoint security systems and processes.
• Understanding of malware families and threats they pose.
• Strong background in endpoint security tools and network security.
• Ability to identify vulnerabilities and threats to data, systems and networks.
• Deep understanding of OS internals, exploits, and hardening.
• Knowledge of cloud infrastructure, encryption, and related security tools.
• Experience with security controls for networks, apps and operating systems.
• Familiarity with coordinating with IT teams to implement endpoint security solutions.
• Ability to assess bidirectional traffic from endpoints and work across a dispersed org.
• Fluency in English communication.

Responsibilities

• Provide operational support for endpoint security solutions.
• Support change management for endpoint security policies.
• Evaluate security exception requests for legitimacy and completeness.
• Review endpoint security alerts for true/false positives.
• Review Threat Reports and recommend resolutions.
• Assess and recommend endpoint security architectures and strategies.
• Ensure endpoint security platforms meet standards and best practices.
• Support audit and compliance with evidence of controls.
• Troubleshoot endpoint security issues with IT and stakeholders.
• Escalate as needed for endpoint security technologies.
• Ensure OS configuration and patch management standards are deployed.
• Configure and support endpoint policies for anti-malware, DLP, EDR, and encryption.
• Support complex projects with timelines and documentation.
• Tune security policies to protect information and mitigate threats.
• Review security exception requests and perform risk assessment.

Skills

Endpoint security

Vulnerability management

Malware analysis

OS hardening

Network security

Cloud security

Security controls

Risk assessments

Compliance assessments

English communication

Education

BS in Computer Science or equivalent

Certifications (CISSP, CompTIA Security+)

Tools

Anti-malware

EDR

DLP

Endpoint encryption

Threat management tools

Cloud security tools

Job description

This analyst will be a member of the IS Threat Management team, reporting to the Cybersecurity Manager. This position will be responsible for various technical cybersecurity analyst functions, including vulnerability management, as well as providing network and endpoint security support.

RESPONSIBILITIES

Endpoint Security Administration

• Provide operational support for endpoint security solutions.
• Support change management tasking relative to the security policies associated with endpoint security solutions.
• Evaluate security exception requests to determine legitimacy and completeness of requests prior to escalation to management.
• Review endpoint security alerts to determine true or false positives based on industry standards.
• Review Threat Reports generated from Endpoint security tools and provide recommendations and plans for appropriate resolutions.
• Continually assess, report on, and make recommendations regarding proposed architectures, strategies, and systems in the endpoint security space.
• Ensure endpoint security platforms, policies, and emerging technologies meet organizational standards and security best practices.
• Support audit and compliance activities by providing acceptable evidence of endpoint security controls and supporting information.
• Troubleshoot and resolve issues related to endpoint security technologies in collaboration with colleagues from IT departments and functional stakeholders.
• Serve as an escalation point for endpoint security technologies.
• Ensure OS level configuration and patch management standards are deployed and adhered to.
• Configuration and support of endpoint technology policies for all applicable endpoint security technologies, including, but not limited to, Anti-malware, DLP, EDR, and endpoint encryption.
• Support of complex technical projects, meeting target timelines, providing technical support to project meetings, authoring project documentation when required, and help to resolve issues.
• Tune and maintain security policies and enhancements to protect company sensitive and confidential information to mitigate security threats to endpoints, assets, data, and users.
• Review technical security exception requests submitted by various personnel across the organization. Conduct technical risk assessment of each request to make recommendations and improve security risk across the enterprise.

QUALIFICATIONS

• Information Systems (IS) security professional with a broad range of knowledge in vulnerability and endpoint security systems/processes.
• Intermediate or advanced understanding of malware families, their types, and threats they pose.
• Strong technical background of endpoint security tools, as well as network security best practices.
• Demonstrated ability in identification of vulnerabilities/threats to data, systems and networks.
• In-depth understanding of operating systems internal, the mechanics of OS exploits, methods of preventing and/or detecting OS exploits and endpoint hardening.
• Comprehensive knowledge of cloud infrastructure, virtual platforms, encryption technologies, endpoint protection, network and cybersecurity tools.
• Demonstrated knowledge of security controls for network, applications, and operating systems.
• Knowledge of existing endpoint security technologies and capabilities to partner with internal IT teams to build and operationalize endpoint security solutions.
• Fundamental understanding of bi-directional traffic flow sources from the endpoints.
• Ability to navigate and work effectively across a complex, geographically dispersed organization.
• Fluency in speaking and communicating in English.

EDUCATION AND WORK EXPERIENCE

• Minimum three of experience
• BS in Computer Science or equivalent field.
• Preferred education and/or experience: Relevant industry recognized certifications (CISSP, CompTIA Security+,

SPECIALIZED KNOWLEDGE, SKILLS & ABILITIES:

• Effectively communicate security goals effectively with other departments.
• Ability to work within an environment of frequently changing priorities.
• Knowledge of industry trending threats, security tools, and best practices.
• Proven ability in the performance of information security risk assessments.
• Experience in performing risk and compliance assessments of new and existing solutions.
• Ability to provide guidance and recommended remediation or alternative solutions for both internal and external supported environments.
• Ability to provide guidance in the identification, documentation and rating of threats/vulnerabilities, and remediation steps recommended to reduce risks to data, systems and networks.