Junior IT Security Analyst

About the role

No prior professional cybersecurity experience is required. Foundational knowledge and readiness may be demonstrated through certifications, home labs, academic projects, internships, security research, CTF participation, or self-study. You will work with engineering, DevOps, and operations to turn security signals into practical action while handling sensitive information responsibly for a growing organization serving Filipino communities.

What you'll do

• Monitor security alerts and reported concerns, perform initial triage, and escalate credible risks promptly
• Support user access reviews, identity lifecycle tasks, least-privilege checks, and authentication controls
• Track vulnerabilities from discovery through ownership, remediation, validation, and closure
• Maintain accurate asset inventories, security procedures, incident records, and evidence repositories
• Assist with incident-response preparation, investigation, containment, communication, and lessons learned
• Help produce practical security awareness materials and guidance for distributed team members
• Handle credentials, personal data, logs, and other sensitive information with appropriate care and confidentiality

What you'll bring

• No prior professional cybersecurity or information-security experience is required
• Foundational understanding of networking, operating systems, cloud services, and common security threats
• Ability to assess alerts methodically and distinguish evidence from assumptions
• Working knowledge of access control, identity management, vulnerability management, and incident response
• Strong documentation habits and attention to timestamps, ownership, status, and supporting evidence
• Responsible judgment when handling confidential information and coordinating sensitive issues
• Clear written communication and willingness to ask for guidance when risk or scope is uncertain

Nice to have

• Relevant certification, home lab, academic project, internship, security research, CTF participation, or documented self-study
• Experience with SIEM, endpoint protection, vulnerability scanning, or ticketing tools
• Basic scripting skills for repeatable analysis or evidence collection
• Familiarity with Philippine data privacy obligations or recognized security frameworks