IT Analyst-Cyber Hygiene (Security)

Req number:

Employment type:

Worksite flexibility:

Who we are

CAI is a global services firm with over 9,000 associates worldwide and a yearly revenue of $1.3 billion+. We have over 40 years of excellence in uniting talent and technology to power the possible for our clients, colleagues, and communities. As a privately held company, we have the freedom and focus to do what is right-whatever it takes. Our tailor-made solutions create lasting results across the public and commercial sectors, and we are trailblazers in bringing neurodiversity to the enterprise.

Job Summary

Job Description

We are looking for an IT Analyst-Cyber Hygiene (Security) who will be responsible for supporting vulnerability assessment, security management, and information security operations across ADB environments. The role will involve administering security platforms, conducting vulnerability analysis and risk assessments, reviewing firewall rules, developing security automation workflows, and supporting the remediation and closure of identified security risks.

This position will be full-time and hybrid in Mandaluyong City.

What You'll Do

• Administer vulnerability assessment and baseline tools such as Tenable One, Hadrian, and Wiz
• Create and manage vulnerability assessment, discovery, and baseline scans across ADB networks
• Perform analysis, risk assessment, and prioritization of vulnerability findings across on-premises and cloud environments
• Review perimeter and host-based firewall rules to identify security gaps and recommend rule optimization and hardening measures
• Develop and maintain security automation workflows using APIs, scripting, and platform integrations to improve operational efficiency
• Assist in software installation review processes for end-users
• Coordinate with system administrators and application owners to validate, remediate, and verify security vulnerabilities and control deficiencies
• Track, manage, and report security remediation activities
• Monitor outstanding security findings and escalate overdue remediation activities
• Support timely closure of identified security risks and control deficiencies
• Assist in developing, updating, and reviewing information security regulations, procedures, and processes
• Assist in preparing business cases, proof-of-concept criteria, testing documentation, and other materials supporting IT security projects
• Create and assign security-related tickets and coordinate resolution with appropriate system administrators
• Follow up on ticket resolutions and outstanding security remediation activities
• Support continuous improvement of security processes, controls, and operational workflows
• Completed vulnerability assessment, discovery, and baseline scans across ADB environments
• Vulnerability analysis, risk assessment, and prioritization of identified security findings
• Documented firewall security gaps and recommendations for rule optimization and hardening
• Security automation workflows using APIs, scripting, and platform integrations
• Timely tracking, reporting, escalation, and closure of security remediation activities
• Updated information security regulations, processes, and related documentation
• Business cases, proof-of-concept criteria, testing documentation, and other IT security project materials
• Security-related tickets created, assigned, tracked, and resolved in coordination with system administrators
• Regular security status updates and reports for relevant stakeholders

What You'll Need

Required:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field
• Minimum of 10 years of experience in cybersecurity, IT security compliance, or a related field
• Strong working knowledge of computer networks, databases, Windows and Linux operating system security, and web applications
• Experience with vulnerability assessment, security analysis, risk assessment, and remediation
• Experience supporting security controls across on-premises and cloud environments
• Strong understanding of security vulnerabilities, remediation processes, and security hardening
• Strong problem-solving and analytical skills
• Excellent communication and interpersonal skills
• Ability to work independently and as part of a team
• ITIL certification at Version 4 or above
• Relevant cybersecurity certification such as Security+ or CEH
• Relevant cloud certification such as AZ-500 or AZ-900

Preferred:

• Experience administering enterprise vulnerability management and security assessment platforms
• Experience with firewall rule management, review, optimization, and hardening
• Experience developing security automation workflows using APIs, scripting, and platform integrations
• Experience working with enterprise IT service management platforms
• Experience supporting information security projects, proof-of-concept activities, and security documentation
• Experience working across both on-premises and cloud security environments
• Experience with security tools such as Tenable One, Wiz, Tufin, Hadrian, and Snyk
• Experience using ServiceNow for security and remediation tracking
• Familiarity with GitHub Copilot and other AI-enabled productivity tools
• Experience working with Ubuntu, macOS, and Windows 11 environments

Physical Demands

• Ability to safely and successfully perform the essential job functions
• Sedentary work that involves sitting or remaining stationary most of the time with occasional need to move around the office to attend meetings, etc.
• Ability to conduct repetitive tasks on a computer, utilizing a mouse, keyboard, and monitor

Reasonable accommodation statement

If you require a reasonable accommodation in completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employment selection process, please direct your inquiries to [email protected] (888) 824 - 8111.