Security Analyst

• Assist in onboarding ADB web applications and API endpoints to the new cloud-based WAF platform, including policy validation and tuning
• Support day-to-day WAF monitoring, change requests, and SLA tracking, escalating findings to senior specialists
• Maintain the WAF asset inventory and related documentation in SharePoint
• Support project management and go-live readiness activities, including tracking of tasks, milestones, risks, and dependencies, as well as cutover planning, stakeholder communications, and post-go-live issue tracking
• Assist in drafting related policies, standard operating procedures, and technical manuals to support WAF operations and knowledge transfer
• Assist in the implementation and administering the AI security monitoring and visibility platform to support oversight of AI tool usage and data flows
• Support continuous monitoring of AI agents and triage of policy exceptions against defined control rules
• Help maintain AI compliance dashboards and prepare periodic assurance reports for management
• Support user training, awareness, and compliance activities on responsible and secure AI use, including the development of guidance materials and tracking of user adherence to AI policies
• Assist in the gap assessment of the current Cyber Risk Assessment (CRA) process against business requirements, industry standards, and best practices
• Support the end-to-end market evaluation of purpose-built cyber risk assessment platforms, covering vendor research, RFI/RFP coordination, demo facilitation, proof-of-concept tracking, and the preparation of comparative scorecards and feature-fit analyses
• Help gather and consolidate functional and non-functional requirements from IT Security, Procurement, Legal, and business stakeholders, and assist in preparing evaluation summaries, scorecards, and recommendation papers for management review
• Complete structured onboarding and assigned cybersecurity training/certifications during the engagement
• Participate in knowledge-sharing sessions, team huddles, and shadowing opportunities with senior practitioners

Cybersecurity Analyst

• Investigate security alerts escalated by SOC Level 1 analysts.
• Perform deeper analysis of suspicious activity across SIEM, EDR, network, identity, cloud, and email security platforms.
• Validate whether security events represent false positives, suspicious behavior, policy violations, or confirmed cybersecurity incidents.
• Correlate events across multiple log sources to identify attack patterns, affected assets, compromised accounts, lateral movement, malware activity, or unauthorized access.
• Determine the scope, severity, business impact, and urgency of security incidents.
• Recommend containment, eradication, and remediation actions to the appropriate technical teams.
• Create and maintain accurate incident timelines, investigation notes, evidence records, and escalation summaries.
• Support phishing investigations, endpoint compromise analysis, suspicious login reviews, malware alerts, brute-force attacks, data exfiltration indicators, and cloud security events.
• Review and improve SOC playbooks, investigation procedures, and escalation criteria.
• Provide technical guidance, coaching, and feedback to SOC Level 1 analysts.
• Identify recurring false positives and recommend tuning improvements for SIEM, EDR, and other detection platforms.
• Participate in post-incident reviews and provide recommendations to improve detection, response, and prevention.
• Support shift handovers by documenting open incidents, pending actions, and important operation contexts.

Security Analyst jobs in Philippines

See all jobs on JobTailor

Cybersecurity Analyst

Cyber Security Analyst