Senior Cybersecurity Analyst - Vulnerability & Policy Lead

ERNI Philippines

Mandaluyong

Hybrid

PHP 1,200,000 - 1,800,000

Full time

11 days ago

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Benefits offered by this job

Training & Certifications

Hybrid work setup

Snacks and beverages

Job summary

ERNI Philippines is seeking an accomplished Senior Cyber Security professional to join our world-class IT security team. You will lead vulnerability management, risk analysis, firewall hardening, and security automation across on-prem and cloud environments.

The role requires extensive experience (10+ years) in cyber security, ITIL, and cloud security certifications. This position offers a hybrid work arrangement, professional growth opportunities, and exposure to MedTech, Finance, and Industry

Qualifications

Bachelor’s degree in Computer Science, Information Technology, or related field.
Minimum of ten (10) years of cyber security, IT security compliance, or related experience.
Must possess relevant certifications in ITIL (v4 or above), Cyber (Security+, CEH), and cloud (AZ-500, or AZ-900)

Responsibilities

Administer various vulnerability assessment and baseline tools such as Tenable One, Hadrian and Wiz, including creation of vulnerability assessment, discovery, and baseline scans for networks.
Perform analysis, risk assessment, and prioritization of vulnerability findings across on-premises, cloud environments.
Review perimeter and host-based firewall rules, identify security gaps, and recommend rule optimization and hardening measures.
Develop and maintain security automation workflows through APIs, scripting, and platform integrations to improve operational efficiency.
Assist in software installation review processes for end-users.
Coordinate with system administrators and application owners to validate, remediate, and verify security vulnerabilities and control deficiencies.
Track, manage, and report security remediation activities; escalade overdue findings and ensure timely closure of identified risks.
Assist in the development, update, or review of information security regulations and processes.
Assist in writing business cases, proof-of-concept (PoC) criteria and testing documentation, and other related documents in support of IT security projects.
Create, assign tickets, and follow up resolutions with appropriate system administrators.