PH02 Mondelez Philippines Inc. is seeking an Information Security Analyst to join the Global Cybersecurity Incident Response Team. In this role, you will contribute to enhancing our security posture, protecting infrastructure, and responding to security incidents. You will be a key contributor in threat analysis, technical documentation, and cross-functional collaboration across business functions and geographies.
What You'll Do
- Contribute to enhancing our security posture and protecting Mondelez infrastructure.
- Create clear and effective technical documentation.
- Communicate effectively with both technical and non-technical stakeholders across all levels, including C-suite executives.
- Contribute to comprehensive containment, eradication, and recovery strategies, prioritizing business continuity.
- Coordinate response activities with incident response teams, internal stakeholders, and external partners.
- Follow established and best-practice incident response procedures.
- Collaborate closely with a wide range of technical and non-technical teams across business functions and geographies.
- Assist with scoping, tailoring, and triaging event and incident information for diverse audiences.
- Contribute to in-depth malware analysis, network forensics, log analysis, and reverse engineering to identify root causes and IOCs or TTPs.
- Contribute to the continuous review, refinement, and expansion of incident response playbooks, runbooks, and standard operating procedures.
- Act as a peer and partner with other analysts, contributing to the uplift of global cybersecurity capabilities.
- Contribute to 'lessons learned' reviews for significant incidents and generate recommendations for improvements.
- Contribute to the team's expansive skill set and expand your own skills across various topics.
- Monitor computer environments for security issues.
- Perform Threat Analysis on events reported by security tools, external parties, and internal subject matter experts.
- Assist the team with investigation of security breaches and other cybersecurity events and incidents.
- Contribute to Root Cause Analysis, Lessons Learned, and Corrective Action Reporting.
- Contribute to executive summaries, status reports and supply metrics to relevant stakeholders.
- Participate in special projects as needed.
What We're Looking For
- Bachelor’s Degree in Information Technology, Cybersecurity, Computer Science or a similar field.
- Strong 3-6+ years of experience in Incident Response, Information Security, SOC, Forensics, Purple-teaming, or a related field.
Nice to Have
- Professional certifications through certifying bodies like CompTIA (Security+, CySA+), SANS-GIAC (GCIH, GDAT, GPEN, GCFE, GRID), ISC2 (CISSP), or Offensive Security (OCSP, OSIR).
Technical Stack
- SIEM (e.g., Splunk, Humio)
- SOAR (e.g., Cyware, Splunk, XSOAR)
- Endpoint Security (EDR) (e.g., CarbonBlack, Crowdstrike, Defender)
- Email Security (e.g., Proofpoint, O365 ATP)
- Firewalls, WAF, IDS/IPS, Web Content Filtering, Proxies, Database, Data Loss Prevention (DLP), Identity and Access Management (IAM)
- Cloud Computing Services
- Scripting
- Frameworks: MITRE ATT&CK Framework, NIST
- Cloud Compute (e.g., AWS, GCP, Azure)
- Cloud Native Application Protection (e.g., Forcepoint ONE, Wiz, Orca)
Team & Environment
You will be part of the Global Cybersecurity Incident Response Team, collaborating with a wide range of technical and non-technical teams across business functions and geographies.
Work Mode
This is a fully remote position.
PH02 Mondelez Philippines Inc. is an equal opportunity employer.
