Operations Analyst Level 1 | Makati  

• Continuously monitors the alert queue, triages security alerts, monitors the health of security sensors and endpoints, collect data and context necessary to initiate IR work.
• Analyzing and determining actionable items based on all available logs, packet captures and all other data sifting through them and accurately distinguishing actionable from all other ‘static’ and weeding out false positives and irrelevant information.
• Ensure all security systems are up-to-date in terms of software and hardware changes.
• Plan and document all data and information relating to security including physical security.

Should have an acceptable degree of knowledge with the following:

• SIEM
• IDS/IPS penetration, vulnerability testing.
• Firewall intrusion detection, prevention, protocols
• Secure coding practices, ethical hacking, and threat modeling
• Windows, Linux, & Unix Operating Systems
• Virtualization technologies
• Database platforms
• Identity and access manager principles
• Application security and encryption technologies
• Secure network architecture
• Subnets, DNS encryption technologies and standards, VPNS, VLANS, and other network routing methods.
• Network and web related protocols.
• Advanced Persistent Threats (APT), phishing and social engineering, network access, controllers, anti-malware and enhanced authentication.
• A graduate of any Five (5) year collegiate course preferably in the field of Information and Communication Technology.

• Work-related experience of at least Three (3) years performing incident response, security incident analysis, and computer forensics.