{"id":4061889,"url":"https://alion.io/job/citadel-pacific-cybersecurity-analyst","title":"Cybersecurity Analyst","company":{"id":3775795,"name":"Citadel Pacific","domain":"citadelpacific.com","url":"https://alion.io/company/citadelpacific-2","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Manatal","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Taguig, Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"Least Privilege","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-11-11T09:05:06Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T13:49:40Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"The Cybersecurity Analyst supports day-to-day cybersecurity operations and the implementation of security initiatives through monitoring, platform administration, evidence collection, testing, documentation, and coordination. Working under established procedures and the technical guidance of the Senior Security Engineer, the role helps maintain security controls, identify potential risks, and improve operational effectiveness while progressively developing technical proficiency and ownership of assigned security processes.\nDUTIES AND RESPONSIBILITIES:\nI. Security Operations & Case Support\nReview security alerts, service tickets and user-reported security concerns using approved playbooks; document findings and escalate based on severity and procedure.\nSupport incident coordination, evidence gathering, timelines, action tracking and closure documentation.\nTrack managed SOC/MDR cases, verify required information is available and follow up on agreed actions and service levels.\nMaintain operational dashboards, recurring reports and metrics with clear source evidence\nII. Security Platform Administration\nPerform approved routine administration, health checks, access reviews, inventory updates, policy verification and evidencecollection for assigned security tools.\n\nSupport onboarding of users, assets, log sources and integrations using documented procedures and change controls.\nValidate that alerts, logs and reports are being generated as expected; escalate data-quality or platform issues to the lead or vendor.\nMaintain accurate runbooks, knowledge articles, configuration records and operational checklists\nIII. Identity, PAM & Access Governance Support\nSupport privileged account discovery, onboarding, owner validation, entitlement reviews and access recertification activities.\nAssist with PAM testing for vaulting, credential rotation, session recording, JIT access and approved remote-access use cases.\nTrack identity and privileged-access exceptions, aged actionsand required approvals.\n\nSupport investigations of suspicious sign-ins or access activity under established procedures\nIV. Endpoint, Device & Email Security Support\nMonitor endpoint and email security consoles, triage routine events, gather evidence and escalate confirmed or complex cases.\nSupport endpoint coverage checks, policy validation, device compliance reporting and controlled pilot testing for Intune/MDM or EDR improvements.\nAssist with Mimecast and Microsoft email-security administration,testing, user-reported email analysis and documentation.\n\nTrack remediation actions with Infrastructure, workplacetechnology and system owners.\n\nV. Data Protection & Compliance Operations\nSupport DLP and information-protection pilots, test cases, alertreview, evidence collection and policy-tuning analysis under\napproved guidance.\n\nMaintain inventories of labels, policies, exceptions, owners andtest results for Microsoft Purview or related controls.\n\nCoordinate with data owners and business stakeholders tovalidate legitimate activity and route possible violations for\nreview.\n\nSupport audit, control-testing and compliance evidence requests\nVI. Vulnerability & Exposure Management Support\nConsolidate scan and assessment results, validate assetownership and maintain remediation trackers.\nPrepare recurring exposure reports, aging views and follow-up\nlists based on approved prioritization criteria.\n\nCoordinate evidence of remediation and retesting withInfrastructure, application teams, vendors and asset owners.\n\nEscalate critical, overdue or unowned findings to the SeniorSecurity Engineer and Cybersecurity Operations Head.\n\nPreferred Qualifications:\nBachelor's degree in Information Technology, ComputerScience, Cybersecurity, Information Security, Engineering, or\na related field. Equivalent practical experience may be considered. At least two (2) years of relevant experience in cybersecurity, IT operations, systems administration, network support, cloud support, or a related technical role.\n\nFoundational understanding of security concepts, including least privilege, MFA, endpoint protection, phishing, vulnerabilities, logging, and incident handling.\nAbility to follow procedures, analyze evidence, document findings, and manage assigned actions reliably.\nPractical exposure through work, internship, laboratory exercises, or projects involving Microsoft 365, Entra ID, Defender, Purview, MDM, EDR, SIEM, vulnerability scanners, or email-security platforms is an advantage.\nBasic knowledge of cybersecurity controls, security monitoring, identity and access management, endpoint protection, and vulnerability management.\nGood analytical, troubleshooting, documentation, and organizational skills.\nEffective communication and coordination skills when working with technical teams, business stakeholders, and service providers.\nBasic PowerShell, Python, API, reporting, or data analysis skills are an advantage.\nWillingness to learn new security technologies and progressively take ownership of assigned tools and processes.\nSecurity monitoring and basic alert analysis.\nSecurity platform administration and operational support.\nIdentity, privileged access, endpoint, email, and data-protection controls.\nVulnerability tracking, remediation coordination, and reporting. \nEvidence collection, technical documentation, and compliance support.\nProblem-solving, attention to detail, accountability, and continuous learning.\nRelevant entry-level certifications, or active progress toward certifications such as CompTIA Security+, ISC2 Certified in Cybersecurity (CC), Microsoft SC-900, AZ-900, or equivalent, are an advantage.\n_______________________\nAbout CITADEL Pacific\nCITADEL Pacific Ltd. (CPL) is a diversified private holding company with operations in the Philippines, Hong Kong, Macau, the Republic of Palau, the Commonwealth of the Northern Mariana Islands, and the US Territory of Guam.\nOur holdings range from controlling stakes in companies engaged in telecommunications, retail, petroleum and gas distribution, commercial, and industrial property, in-flight catering, and manpower services. Recent acquisitions entering Solar and Data Center businesses position CITADEL to future facing and fast-growing industries in renewables energy and digital infrastructure. Our recent acquisitions of Solar and Data Center businesses position CITADEL in future-facing, fast-growing industries within the renewable energy and digital infrastructure sectors.\nWe offer a competitive total rewards package which includes a base salary determined by factors such as role, experience, skill set, and location. Additionally, eligible employees may receive discretionary bonuses based on both company performance and individual achievements. Our benefits and programs are designed to meet the needs of our employees and are benchmarked to the market. Detailed information regarding compensation and benefits will be shared during the hiring process.","description_format":"text","description_chars":6949,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Fossil Fuels","Data Centers & Colocation"],"lifecycle":[{"event":"open","at":"2026-11-11T09:05:06Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":13,"reasons":["conf:2","win:early","comp:junior"],"computed_at":"2026-11-11T16:02:30Z"},"pay":null,"html_url":"https://alion.io/job/citadel-pacific-cybersecurity-analyst","json_url":"https://alion.io/job/citadel-pacific-cybersecurity-analyst.json","meta":{"generated_at":"2026-11-11T16:02:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30120,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3775795},"rest":"https://alion.io/mcp/rest/get_company?id=3775795"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcitadel-pacific-cybersecurity-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcitadel-pacific-cybersecurity-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcitadel-pacific-cybersecurity-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/citadel-pacific-cybersecurity-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcitadel-pacific-cybersecurity-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4061889}},{"tool":"search_jobs","arguments":{"company":"citadelpacific.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4061889},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}