Lead Analyst Cybersecurity

ERNI is a fast-growing Software Development company headquartered and founded in Switzerland in 1994, with more than 800 employees. We are highly specialized in IT & software engineering to enable and deliver innovation in process and technology. Our first service center in Asia Pacific is in Metro Manila (Mandaluyong) from where we provide our service to Europe, APAC incl. our local market Philippines, and USA regions. We are now geared towards expansion and are looking for highly motivated joiners.

WHY ERNI is the best place to call HOME? 🏡

• 🤩 At ERNI, this is how we can support you; ALL company PERKS AND BENEFITS take effect UPON HIRING!

• Contract: there is always a project and opportunity for you.

• Personal Development and Travel Opportunities outside the Philippines.

• Baby Basket – to welcome your newborn to the ERNI family.

• Fruit Basket – boost of vitamins during hospitalization.

• Free snacks and coffee in the office

🔐 UNLOCKING NEW DOORS OF GROWTH & OPPORTUNITIES

• Free Training with Certifications: Grow with us through technical and non-technical training.

• Challenging Projects: ERNI is dedicated to developing high-quality software in complex technical environments such as MedTech, Industry, Finance, and Transportation. Have the chance to participate in various technically challenging projects amongst passionate and skilled colleagues.

• Employee Welfare: You will be guided by a group of people who will guide and support you to have the right tools and mindset.

• Promotions & Recognition: From the very first day, we offer you a way to learn and develop yourself in our company. Your colleagues and superiors consistently recognize and appreciate all efforts, making you feel satisfied with your achievements.

• Communication: You will find transparency, honesty, and open communication in our working culture. we value suggestions, opinions, and feedback from all employees.

⏱ FLEXIBILITY

• Hybrid Set-Up: We are combining both remote work and in-person work. The hybrid setup will allow you to reduce commuting time and have a more flexible work schedule. This will help you to manage better your work-life balance.

🎉 EVENTS:

• We provide many opportunities to connect and build relationships. We are learning, growing, and celebrating achievements together. You will experience a wide range of different exciting activities. What to expect? Leisure Events, Summer Events, Family Events, Social Events, and Year-End Events.

👋 What are our wishes?

• Bachelor’s degree in Computer Science, Information Technology, or related field.

• Minimum of ten (10) years of cyber security, IT security compliance, or related experience.

Technical Knowledge

• Good working knowledge of computer networks, databases, Windows and Linux operating system security, and web applications.

Soft Skills

• Strong problem-solving and analytical skills.

• Excellent communication and interpersonal skills.

• Ability to work independently and as part of a team.

Tools/Software

• Tenable One, Wiz, Tufin, ServiceNow, Github Copilot, Hadrian, Snyk, Ubuntu, MacOS, Win11

Certification

• Must possess relevant certifications in ITIL (v4 or above), Cyber (ie Security+, CEH), and cloud (ie AZ-500, or AZ-900)
  

💼 How can you contribute to the team?

System Management:

• Administer various vulnerability assessment and baseline tools such as Tenable One, Hadrian and Wiz, including creation of vulnerability assessment, discovery, and baseline scans for networks.

Security Management:

• Perform analysis, risk assessment, and prioritization of vulnerability findings across on-premises, cloud environments.

• Review perimeter and host-based firewall rules, identify security gaps, and recommend rule optimization and hardening measures.

• Develop and maintain security automation workflows through APIs, scripting, and platform integrations to improve operational efficiency.

• Assist in software installation review processes for end-users.

• Coordinate with system administrators and application owners to validate, remediate, and verify security vulnerabilities and control deficiencies.

• Track, manage, and report security remediation activities; escalate overdue findings and ensure timely closure of identified risks.

Documentation and Reporting:

• Assist in the development, update, or review of information security regulations and processes.

• Assist in writing business cases, proof-of-concept (PoC) criteria and testing documentation, and other related documents in support of IT security projects.

• Create, assign tickets, and follow up resolutions with appropriate system administrators.