POSITION SUMMARY

The Cyber Security Analyst is a front-facing role, working directly with incoming alerts, reports, and metrics to monitor and maintain the security of Sourcepass' clients. The Analyst performs triage to filter out non-actionable information so that clients can continue to focus on running their businesses. The Analyst performs minor response to non-serious, non-complex events and escalates anything else to senior security team staff. This position reports to the SOC Team Lead.

RESPONSIBILITIES

• Monitor incoming alerts, reports, and metrics from a variety of a systems to perform triage
• Perform minor response to non-serious, non-complex events (malware, data leakage, account misuse, etc.)
• Perform automated or manual patching of discovered vulnerabilities or misconfigurations.
• Escalate more serious or complex events to senior security team staff
• Clearly explain event sources and resolutions to clients
• Clearly document steps taken
• Follow documented procedures to drive resolution
• Make recommendations for improvements to processes and tools

DESIRED SKILLSET/EXPERIENCE

• Willingness to learn and improve both core function skills and potential additional security role skills
• Both strong written and strong verbal communication skills, both internally and client-facing Basic understanding of SOC practices and processes Strong understanding of incident response practices and processes
• Strong understanding of the Windows operating system (Linux and Macintosh a plus)
• Strong understanding of the Windows ecosystem (Active Directory, Azure, Microsoft365)
• Experience with ticketing and tracking systems Basic knowledge of networking protocols and topologies, as well as network analysis.
• Basic understanding of malware analysis Analytical, problem solving, critical thinking skills
• Basic understanding of OS and network auditing
• Knowledge of scripting languages (PowerShell, batch, etc.) a plus Security+, E|CIH, & GCIH certifications (or equivalents) all preferred

This is a contractor position.

Basic understanding of SOC practices, incident response, Windows OS and ecosystem, networking protocols, and malware analysis; strong communication; willingness to learn; Security+, E|CIH, GCIH preferred.

Key Responsibilities

• monitoring security alerts
• performing incident triage
• escalating complex events

Skills & Tools

Active Directory, Azure, Microsoft 365, PowerShell

Job Details

• Category: Information Technology
• Seniority: Entry Level
• Commitment: Full Time, Contract
• Workplace: Remote — Philippines
• Languages: English

About Sourcepass

An IT and cybersecurity services provider that monitors and maintains client security. — Industry: Information Technology