SENIOR CYBERSECURITY ANALYST (END POINT SECURITY)

Tenet Global Business Center, Inc.; Taguig; On-site; PHP 800,000 - 1,000,000; Full time

Job summary

Tenet Global Business Center, Inc. in Manila seeks an IS Threat Management Analyst to join the Cybersecurity organization within the Global Business Center.

You will provide operational support for endpoint security, review alerts and threat reports, and help ensure encryption and DLP policies meet standards across OS and networks.

Qualifications

• IS security professional with knowledge in vulnerability and endpoint security systems/processes.
• Understanding malware families, types, and threats.
• Strong background in endpoint security tools and network security best practices.
• Identification of vulnerabilities/threats to data, systems and networks.
• Understanding OS internals, exploits, and hardening.
• Knowledge of cloud infrastructure, encryption, endpoint protection, network and cybersecurity tools.
• Knowledge of security controls for network, applications, and operating systems.

Responsibilities

• Provide operational support for endpoint security solutions.
• Support change management for security policies relating to endpoint security.
• Evaluate security exception requests for legitimacy and completeness.
• Review endpoint security alerts to determine true/false positives.
• Review Threat Reports and provide recommendations for resolutions.
• Assess and recommend architectures, strategies, and systems in endpoint security.
• Ensure endpoint security platforms meet standards and best practices.
• Support audit and compliance with acceptable evidence of controls.
• Troubleshoot issues with endpoint security technologies in collaboration with IT.
• Serve as escalation point for endpoint security technologies.
• Ensure OS level patch management standards are deployed.
• Configure and support endpoint security policies (Anti-malware, DLP, EDR, encryption).
• Support complex security projects with documentation.

Skills

Endpoint security

Vulnerability management

Network security

OS hardening

Cloud infrastructure

Education

BS in Computer Science

Certifications (CISSP, Security+)

Tools

EDR

Anti-malware

DLP

Endpoint encryption

Job description

OVERVIEW AND REPORTING RELATIONSHIP

This analyst will be a member of the IS Threat Management team, reporting to the Cybersecurity Manager. This position will be responsible for various technical cybersecurity analyst functions, including vulnerability management, as well as providing network and endpoint security support.

REPORTING STRUCTURE & WORK SETTING

Global Business Center - Manila position, within the IS Threat Management Team, under the Cybersecurity Manager, within the Tenet Corporate Cybersecurity organization.

RESPONSIBILITIES

• Provide operational support for endpoint security solutions.

• Support change management tasking relative to the security policies associated with endpoint security solutions.

• Evaluate security exception requests to determine legitimacy and completeness of requests prior to escalation to management.

• Review endpoint security alerts to determine true or false positives based on industry standards.

• Review Threat Reports generated from Endpoint security tools and provide recommendations and plans for appropriate resolutions.

• Continually assess, report on, and make recommendations regarding proposed architectures, strategies, and systems in the endpoint security space.

• Ensure endpoint security platforms, policies, and emerging technologies meet organizational standards and security best practices.

• Support audit and compliance activities by providing acceptable evidence of endpoint security controls and supporting information.

• Troubleshoot and resolve issues related to endpoint security technologies in collaboration with colleagues from IT departments and functional stakeholders.

• Serve as an escalation point for endpoint security technologies.

• Ensure OS level configuration and patch management standards are deployed and adhered to.

• Configuration and support of endpoint technology policies for all applicable endpoint security technologies, including, but not limited to, Anti-malware, DLP, EDR, and endpoint encryption.

• Support of complex technical projects, meeting target timelines, providing technical support to project meetings, authoring project documentation when required, and help to resolve issues.

• Tune and maintain security policies and enhancements to protect company sensitive and confidential information to mitigate security threats to endpoints, assets, data, and users.

• Review technical security exception requests submitted by various personnel across the organization. Conduct technical risk assessment of each request to make recommendations and improve security risk across the enterprise.

QUALIFICATIONS

• Information Systems (IS) security professional with a broad range of knowledge in vulnerability and endpoint security systems/processes.

• Intermediate or advanced understanding of malware families, their types, and threats they pose.

• Strong technical background of endpoint security tools, as well as network security best practices.

• Demonstrated ability in identification of vulnerabilities/threats to data, systems and networks.

• In-depth understanding of operating systems internal, the mechanics of OS exploits, methods of preventing and/or detecting OS exploits and endpoint hardening.

• Comprehensive knowledge of cloud infrastructure, virtual platforms, encryption technologies, endpoint protection, network and cybersecurity tools.

• Demonstrated knowledge of security controls for network, applications, and operating systems.

• Knowledge of existing endpoint security technologies and capabilities to partner with internal IT teams to build and operationalize endpoint security solutions.

• Fundamental understanding of bi-directional traffic flow sources from the endpoints.

• Ability to navigate and work effectively across a complex, geographically dispersed organization.

• Fluency in speaking and communicating in English.

EDUCATION AND WORK EXPERIENCE

• Minimum three of experience

• BS in Computer Science or equivalent field.

• Preferred education and/or experience: Relevant industry recognized certifications (CISSP, CompTIA Security+,

• CEH, GIAC, Security+, etc.)